Sun Ethernet Fabric Operating System CLI Reference Manual, Vol. 1
Part No: E60925-02
August 2015
Copyright © 2015, Oracle and/or its affiliates. All rights reserved.
This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.
The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.
If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, then the following notice is applicable:
U.S. GOVERNMENT END USERS. Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government.
This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.
Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.
Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group.
This software or hardware and documentation may provide access to or information about content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services unless otherwise set forth in an applicable agreement between you and Oracle. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services, except as set forth in an applicable agreement between you and Oracle.
Documentation Accessibility
For information about Oracle's commitment to accessibility, visit the Oracle Accessibility Program website at http://www.oracle.com/pls/topic/lookup?ctx=acc&id=docacc.
Access to Oracle Support
Oracle customers that have purchased support have access to electronic support through My Oracle Support. For information, visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=info or visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=trs if you are hearing impaired.
Copyright © 2015, Oracle et/ou ses affiliés. Tous droits réservés.
Ce logiciel et la documentation qui l'accompagne sont protégés par les lois sur la propriété intellectuelle. Ils sont concédés sous licence et soumis à des restrictions d'utilisation et de divulgation. Sauf stipulation expresse de votre contrat de licence ou de la loi, vous ne pouvez pas copier, reproduire, traduire, diffuser, modifier, breveter, transmettre, distribuer, exposer, exécuter, publier ou afficher le logiciel, même partiellement, sous quelque forme et par quelque procédé que ce soit. Par ailleurs, il est interdit de procéder à toute ingénierie inverse du logiciel, de le désassembler ou de le décompiler, excepté à des fins d'interopérabilité avec des logiciels tiers ou tel que prescrit par la loi.
Les informations fournies dans ce document sont susceptibles de modification sans préavis. Par ailleurs, Oracle Corporation ne garantit pas qu'elles soient exemptes d'erreurs et vous invite, le cas échéant, à lui en faire part par écrit.
Si ce logiciel, ou la documentation qui l'accompagne, est concédé sous licence au Gouvernement des Etats-Unis, ou à toute entité qui délivre la licence de ce logiciel ou l'utilise pour le compte du Gouvernement des Etats-Unis, la notice suivante s'applique:
U.S. GOVERNMENT END USERS. Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government.
Ce logiciel ou matériel a été développé pour un usage général dans le cadre d'applications de gestion des informations. Ce logiciel ou matériel n'est pas conçu ni n'est destiné à être utilisé dans des applications à risque, notamment dans des applications pouvant causer des dommages corporels. Si vous utilisez ce logiciel ou matériel dans le cadre d'applications dangereuses, il est de votre responsabilité de prendre toutes les mesures de secours, de sauvegarde, de redondance et autres mesures nécessaires à son utilisation dans des conditions optimales de sécurité. Oracle Corporation et ses affiliés déclinent toute responsabilité quant aux dommages causés par l'utilisation de ce logiciel ou matériel pour ce type d'applications.
Oracle et Java sont des marques déposées d'Oracle Corporation et/ou de ses affiliés. Tout autre nom mentionné peut correspondre à des marques appartenant à d'autres propriétaires qu'Oracle.
Intel et Intel Xeon sont des marques ou des marques déposées d'Intel Corporation. Toutes les marques SPARC sont utilisées sous licence et sont des marques ou des marques déposées de SPARC International, Inc. AMD, Opteron, le logo AMD et le logo AMD Opteron sont des marques ou des marques déposées d'Advanced Micro Devices. UNIX est une marque déposée d'The Open Group.
Ce logiciel ou matériel et la documentation qui l'accompagne peuvent fournir des informations ou des liens donnant accès à des contenus, des produits et des services émanant de tiers. Oracle Corporation et ses affiliés déclinent toute responsabilité ou garantie expresse quant aux contenus, produits ou services émanant de tiers, sauf mention contraire stipulée dans un contrat entre vous et Oracle. En aucun cas, Oracle Corporation et ses affiliés ne sauraient être tenus pour responsables des pertes subies, des coûts occasionnés ou des dommages causés par l'accès à des contenus, produits ou services tiers, ou à leur utilisation, sauf mention contraire stipulée dans un contrat entre vous et Oracle.
Accessibilité de la documentation
Pour plus d'informations sur l'engagement d'Oracle pour l'accessibilité à la documentation, visitez le site Web Oracle Accessibility Program, à l'adresse http://www.oracle.com/pls/topic/lookup?ctx=acc&id=docacc.
Accès au support électronique
Les clients Oracle qui ont souscrit un contrat de support ont accès au support électronique via My Oracle Support. Pour plus d'informations, visitez le site http://www.oracle.com/pls/topic/lookup?ctx=acc&id=info ou le site http://www.oracle.com/pls/topic/lookup?ctx=acc&id=trs si vous êtes malentendant.
Contents
1.4 CLI Reference Manual
Details by Volume
2.2.3 Global
Configuration Mode
2.2.4 Switch
Configuration Mode
2.2.5 Interface
Configuration Mode
2.2.10 Boot
Configuration Mode
2.2.11 Redundancy
Configuration Mode
2.2.12 Profile
Configuration Mode
2.2.13 Protocol-Specific
Modes
3.13 alias
- replacement string
3.14 alias – interface | exec
| configure
3.15 access-list provision
mode
3.27 password
validate uppercase
3.28 password
validate lowercase
3.29 password
validate numbers
3.30 password
validate symbols
3.31 set
minimum password length
3.32 show
password validate rules
3.33 show
minimum password length
3.35 show
password max-life-time
4.7 default ip address
allocation protocol
4.11 login
authentication-default
4.12 authorized-manager
ip-source
4.16 interface-configuration
and deletion
4.27 copy
running-config startup-config
4.35 shutdown
- physical/VLAN/port-channel/tunnel Interface
4.42 shutdown ospf | ospf3 |
bgp | isis | rsvpte | ldp
4.43 start ospf | ospf3 | bgp
| isis| rsvpte | ldp
4.44 set
switch maximum - threshold
4.45 set
switch temperature - threshold
4.46 set
switch power - threshold
4.50 clear
interfaces - counters
4.55 show
interfaces - counters
4.56 show
system-specific port-id
4.68 show
system acknowledgement
4.70 port-isolation
in_vlan_ID
4.73 set front-panel
port-count
4.85 management vlan-list
<port_list>
4.87 audit-logging
logsize-threshold
4.91 set
http authentication-scheme
4.92 set
http redirection enable
4.94 show http
authentication-scheme
4.96.1 set
entity physical-index
4.96.5 show
entity alias-mapping
4.96.6 show
entity phy-containment
4.97 set hitless-restart
enable
4.102 show – ssh/telnet client
4.106 show provider-backbone line
service-instance
4.110 traffic-separation control
4.116 show SEFOS memory status
4.121 show packet receive index
4.124 default
rm-interface-type
4.126 ip
unnumbered - peer-mac
4.127 clear
http server statistics
4.129 show iss-config-restore
status
4.142 show l3vlan interfaces
counters
4.143 debug-logging
- flash url
4.146 set redundancy heart-beat
4.148 set redundancy
hardware-type
5.
RADIUS
6.
TACACS
6.2. tacacs
use-server address
7.
Syslog
7.17. syslog
relay transport type
7.22. show
syslog localstorage
7.28. show
syslog relay transport type
7.32. snmp trap
syslog-server-status
8.
TCP
8.4. show
tcp retransmission details
9.
UDP
10. L2 DHCP Snooping
10.1. ip dhcp snooping - Global
Command
10.2. ip dhcp snooping verify
mac-address
10.3. ip dhcp snooping - VLAN
Interface Command
10.5. show ip dhcp snooping
globals
10.6. show ip dhcp snooping vlan
11. IPDB
11.6. show ip binding counters
11.8. debug ip binding database
11.12. show mac force forwarding
11.13. debug ip binding database
all
• Overview – Provides information on Oracle SEFOS CLI commands
• Audience – Users and system administrators who configure SEFOS through the CLI
• Required knowledge – Basic knowledge of UNIX CLI command syntax
Documentation and resources for this product and related products are available at http://www.oracle.com/goto/es2-72_es2-64/docs.
Acronyms and Abbreviations
Terms |
Explanation |
Authentication, Authorization, and Accounting |
|
ABR |
Available bit rate |
AC |
Attachment circuit |
ACL |
Access control list |
ADU |
Automatic dialing unit |
APNIC |
Asia-Pacific network information centre |
ARP |
Address Resolution Protocol |
AS |
Autonomous system |
ASBR |
Autonomous system border router |
AST |
Advanced switch technology |
ATM |
Asynchronous transmission mode |
BFD |
Bidirectional Forwarding Detection |
BGP |
Border Gateway Protocol |
BOOTP |
Bootstrap Protocol |
BPDU |
Bridge protocol data unit |
BSD |
Berkeley software distribution |
BVLAN |
Backbone VLAN |
CBP |
Customer backbone port |
CFA |
Common forwarding agent |
CIDR |
Classless interdomain routing |
CIST |
Common Internal Spanning Tree |
CLI |
Command-line interface |
CNP |
Customer network port |
COS |
Class of service |
CPSS |
Control packet switching system |
CRU |
Common Routing Utilities (FSAP2 utilities) |
CSV |
Circuit switched voice |
CTAG |
Customer VLAN tag |
CVID |
Customer VLAN ID |
CVLAN |
Customer VLAN |
DAD |
Duplicate address detection |
DCBX |
Data Center Bridging Exchange Protocol |
DDP |
Data Delivery Protocol |
DEI |
Drop eligible indicator |
DF |
Designated forwarder |
DHCP |
Dynamic Host Configuration Protocol |
DHRL |
DHCP relay |
DHSRV |
DHCP server |
DLF |
Destination lookup failure |
DNS |
Domain name system |
DOT1X |
IEEE Standard for Port-Based Network Access Control (PNAC) known as DOT1X or 802.1X |
DP |
Designated port |
DR |
Designated router |
DSCP |
Differentiated services code point |
DSMON |
Differentiated services monitoring |
DVMRP |
Distance Vector Multicast Routing Protocol |
ECFM |
Ethernet connectivity fault management |
ECMP |
Equal cost multiple path |
EIGRP |
Enhanced Interior Gateway Protocol |
ELMI |
Ethernet local management interface |
ELPS |
Ethernet linear protection switching |
EOAM |
Ethernet operations administration and maintenance |
ERPS |
Ethernet ring protection switching |
ESP |
Ethernet switched path |
EVCPRO |
Ethernet virtual circuit configurations and provisioning |
FDB |
Forwarding database |
FID |
Forwarding information database |
FID
VLAN |
Forwarding information database VLAN |
GARP |
Generic Attribute Registration Protocol |
GMRP |
GARP Multicast Registration Protocol |
GVRP |
GARP VLAN Registration Protocol |
HDLC |
High-level data link control |
HTTP |
Hyper Text Transport Protocol |
IANA |
Internet assigned numbers authority |
ICMP |
Internet Control Message Protocol |
IGMP |
Internet Group Management Protol |
IGP |
Interior Gateway Protocol |
IGRP |
Interior Gateway Routing Protocol |
IGS |
IGMP snooping |
IP – DSLAM |
Internet protocol - Digital subscriber line access multiplexer |
IPDB |
IP binding database |
IPMC |
Inernet protocol multicast |
ISDN |
Integrated services for digital network |
ISID |
Instance service identifier |
ISIS |
Intermediate System-to-Intermediate System protocol |
ISP |
Internet service provider |
IVL |
Independent VLAN learning |
L2CP |
Layer 2 Control Protocol |
L2VPN |
Layer 2 virtual private network |
LA |
Link aggregation |
LACNIC |
Latin American and Caribbean Network Information Centre |
LACP |
Link Aggregation Control Protocol |
LAN |
Local area network |
LCM |
Logical connection manager (part of EVCPRO) |
LDP |
Label Distribution Protocol |
LLDP |
Link Layer Discovery Protocol |
LS – ID |
Link state identifier |
LSA |
Link state advertisement |
LSDB |
Link state database |
MAC |
Media access control |
MAU |
Medium attachment unit |
MBSM |
Multi board system manager |
MD5 |
Message digest |
MDI |
Multiple document interface |
MDIX |
Media dependent interface crossover(X) |
MEF |
Metro Ethernet forum |
MFWD |
Multicast forwarding |
MI |
Multiple instance |
MIB |
Management information base |
MIDGEN |
Middle level code generator |
MLD |
Multicast Listener Discovery |
MLDS |
Multicast listener discovery snooping |
MMRP |
Multiple MAC Registration Protocol |
MPLS |
Multiprotocol label switching |
MPLS PW |
Multiprotocol label switching - Pseudowire support |
MPLSDB |
Multiprotocol label switching database |
MPLSOAM |
Multiprotocol label switching operation and management |
MRP |
Multiple Registration Protocol |
MSDP |
Multicast Source Discovery Protocol |
MST |
Multiple spanning tree |
MSTI |
Multiple spanning tree instance |
MTU |
Maximum transmission unit |
MVRP |
Multiple VLAN Registration Protocol |
NAS |
Network access security |
NAT |
Network address translation |
NBMA |
Non broadcast multiple access |
ND |
Neighbor Discovery |
NDRA |
Neighbor Discovery Router Advertisement protocol |
NFS |
Network file system |
NMS) |
Network management system |
NPAPI |
Network processor application programming interface |
NSSA |
Not-so-stubby area |
NV |
Network virtualization |
NVE |
Network virtualization endpoint |
NVRAM |
Non volatile random access memory |
OC – 12 |
Optical carrier - 12 |
OFC |
Open flow client |
OFCL |
Open flow client |
OID |
Object identifier |
OOB |
Out of band |
OSPF |
Open Shortest Path First |
OSPF NSSA |
OSPF not-so-stubby area |
OSPFRM |
Open shortest path first resource manager |
OSPFTE |
Open shortest path first traffic engineering |
PSN |
Packet-switching network |
PBB |
Provider backbone bridge |
PBB
BCOMP |
Provider backbone bridging - B-Component |
PBB ICOMP |
Provider backbone bridging - I-Component |
PBBTE |
Provider backbone bridging traffic engineering |
PCMCIA |
Personal computer memory card international association |
PCP |
Priority code point |
PDU |
Protocol description unit |
PEP |
Provider edge port |
PIM |
Protocol independent multicast |
PING |
Packet Internet goopher |
PING PDU |
Packet Internet goopher protocol data unit |
PIP |
Provider instance ports |
PMTU-D |
PMTU discovery |
PNAC |
Port-based Network Access Control |
PNP |
Provider network port |
POE |
Power over Ethernet |
PPP |
Point-to-Point Protocol |
PPPoE |
Point-to-Point Protocol |
PTP |
Precision Time Protocol |
PVID |
Port VLAN ID |
PVRST |
Per-VLAN rapid spanning tree |
PVRT |
Per VLAN Rapid Spanning Tree Protocol |
PW |
Pseudowire |
QINQ |
Q-in-Q |
QoSX |
Quality of Service Extention |
RADIUS |
Remote authentication dial in user service |
RARP |
Reverse Address Resolution Protocol |
RBR |
Routing bridge |
RBRG |
Routing bridge |
RDNSS |
Recursive DNS server |
RED |
Random early detection |
RSVPTE |
Resource Reservation Protocol with Traffic Engineering |
RIB |
Routing information base |
RIP |
Routing Information Protocol |
RM |
Redundancy Manager |
RMON |
Remote monitoring |
RRD |
Route redistribution |
RSNA |
Robust security network association |
RSVPTE |
Resource Reservation Protocol Traffic Engineering |
RTM |
Routing table manager |
SEFOS |
Sun Ethernet Fabric Operating System |
SFTP |
SSH File Transfer Protocol |
SHA |
Secure hash algorithm |
SI |
Single instance |
SISP |
Switch instance shared port |
SLA |
Service-level ageement |
SLI |
Socket layer interface |
SNMP |
Simple Network Management Protocol |
SPF |
Shortest path first |
SRM |
State refresh messages |
SSH |
Secure shell |
SSL |
Secure sockets layer |
STAG |
Service VLAN tag |
STP |
Spanning Tree Protocol |
SVL |
Shared VLAN Learning |
SVLAN |
Service VLAN |
SYNCE |
Synchronous Ethernet |
TAC |
Transmission and admission control |
TACACS |
Terminal access controller access control system |
TE |
Traffic engineering |
TESI |
TE service instance |
TFTP |
Trivial File Transfer Protocol |
TLM |
Traffic engineering link management |
TLV |
Type, length, and value |
TOS |
Type of service |
TPID |
Tag protocol identifier |
TRCRT |
Traceroute |
TTL |
Time to live |
UDP |
User Datagram Protocol |
URL. |
Uniform resource locator |
VACM |
View
based access control model |
VCM |
Virtual context manager |
VFI |
Virtual forwarding instance |
VID |
VLAN ID |
VIP |
Virtual instance port |
VLAN |
Virtual local area network |
VNI |
Virtual network identifier |
VPLS |
Virtual private LAN service |
VRF |
Virtual routing and forwarding |
VRID |
Virtual router identifier |
VRRP |
Virtual Router Redundancy Protocol |
VTEP |
VXLAN endpoints |
VXLAN |
Virtual extensible local area network |
WSS |
Wireless switching solution |
WSSUSER |
Wireless switching solution user |
This table
lists the various command modes used in this document with their access and
exit methods.
Command Mode |
Access Method |
Prompt |
Exit method |
User EXEC |
Initial mode for starting a session. |
SEFOS> |
Use the logout command to return to the Oracle ILOM prompt. |
Privileged EXEC |
From User EXEC mode, use the enable command. |
SEFOS# |
Use the disable command to return to the User EXEC mode. |
Global Configuration |
From Privileged EXEC mode, use the configure terminal command. |
SEFOS(config)# |
Use the exit or end command to exit to Privileged EXEC mode. |
Interface Configuration |
From Global Configuration mode, use the interface-type interface-id command. |
SEFOS(config-if)# |
Use the exit command to return to Global Configuration mode, or use the end command to return to Privileged EXEC mode. |
Switch Configuration |
From Global Configuration mode, use the switch switch-name command. |
SEFOS(config-switch)# |
Use the exit command to return to Global Configuration mode, or use the end command to return to Privileged EXEC mode. |
Interface Range |
From Global Configuration mode, use the interface range ({interface-type slot/port-port} {vlan vlan-id(1-4094) - vlan-id(2-4094)}) command. |
SEFOS(config-if-range)# |
Use the exit command to return to Global Configuration mode, or use the end command to return to Privileged EXEC mode. |
Config-VLAN |
From Global Configuration mode, use the vlan vlan-id command. |
SEFOS(config-vlan)# |
Use the exit command to return to Global Configuration mode, or use the end command to return to Privileged EXEC mode. |
Line Configuration |
From Global Configuration mode, use the line command. |
SEFOS(config-line)# |
Use the exit command to return to Global Configuration mode, or use the end command to return to Privileged EXEC mode. |
Profile Configuration |
From Global Configuration mode, use the ip mcast profile profile-id [description (128)] command. |
SEFOS(config-profile)# |
Use the exit command to return to Global Configuration mode, or use the end command to return to Privileged EXEC mode. |
Service
Instance Configuration Mode |
From Switch Configuration mode, use the service-instance command. |
SEFOS(config-switch-si)# |
Use the exit command to return to Switch Configuration mode. |
TE Service
Instance Mode |
From Switch Configuration mode, use the backbone traffic-engineering service-instance command. |
SEFOS(config-switch-tesi)# |
Use the exit command to return to Switch Configuration mode. |
Protection group Configuration mode |
From Switch Configuration mode, use the aps [linear] group group-number command. |
SEFOS(config-switch-pg)# |
Use the exit command to return to Switch Configuration mode. |
IP Explicit
Path |
From Global Configuration mode, use the ip explicit-path identifier command. |
SEFOS(cfg-ip-expl-path)# |
Use the exit command to return to Global Configuration mode, or use the end command to return to Privileged EXEC mode. |
BGP Router
Configuration |
From Global Configuration mode, use the router bgp AS-no command. |
SEFOS(config-router)# |
Use the exit command to return to Global Configuration mode, or use the end command to return to Privileged EXEC mode. |
Route Map
Configuration |
From Global Configuration mode, route-map name command. |
SEFOS(config-route-RouteName)# |
Use the exit command to return to Global Configuration mode, or use the end command to return to Privileged EXEC mode. |
Hardware
Configuration |
Global Configuration mode command enables access to hardware commands. |
SEFOS(config-hw)# |
Use the exit command to return to Global Configuration mode, or use the end command to return to Privileged EXEC mode. |
Controller
Configuration |
Global Configuration mode command enables access to controller configuration commands. |
SEFOS(config-controller)# |
Use the exit command to return to Global Configuration mode, or use the end command to return to Privileged EXEC mode. |
Feedback
Provide feedback about this documentation at http://www.oracle.com/goto/docfeedback.
Oracle SEFOS is a pre-integrated OEM-ready software for managed Layer 2/Layer 3 switches, which performs switching between Ethernet ports at wire speed. Oracle SEFOS provides the basic bridging functionality and also offers advanced features such as link aggregation, GVRP/GMRP, IGMP snooping, and network access control.
This
document describes in detail the CLI commands supported by Oracle SEFOS. This
document is a reference manual for users and system administrators who
configure Oracle SEFOS
through the CLI interface.
This
document details all the CLI commands provided by the Oracle SEFOS
software. Commands that are not applicable for a specific hardware platform are
indicated wherever necessary.
CLI commands focuse on performing specific operations. In order to provide a consistent user experience, the CLI commands of SEFOS protocols and solutions have been modified to adhere to the Industry Standard CLI syntax.
The following approach is followed for updating the Industry Standard commands to this document.
• Newly added commands - A complete standardized implementation of the existing command is documented immediately after the relevant old command.
• Newly added parameters in the existing commands - If the existing command is modified for one or more parameters or values only, then the update is done inline by modifying the syntax with the new tokens.
CLI Volume No |
Chapter No |
Chapter Title |
Package Details |
||||
Work Group |
Enterprise |
Metro |
Metro_E |
||||
1 |
1 |
Introduction |
NA |
NA |
NA |
NA |
|
2 |
Command-Line Interface |
NA |
NA |
NA |
NA |
||
3 |
System Commands |
Y |
Y |
Y |
Y |
||
4 |
System Features |
Y |
Y |
Y |
Y |
||
5 |
VCM |
N |
Y |
Y |
N |
||
6 |
RADIUS |
Y |
Y |
Y |
Y |
||
7 |
TACACS |
Y |
Y |
Y |
Y |
||
8 |
SNMPv3 |
Y |
Y |
Y |
Y |
||
9 |
Syslog |
Y |
Y |
Y |
Y |
||
10 |
TCP |
Y |
Y |
Y |
Y |
||
11 |
UDP |
Y |
Y |
Y |
N |
||
12 |
L2 DHCP Snooping |
Y |
Y |
Y |
Y |
||
13 |
IPDB |
Y |
Y |
Y |
Y |
||
|
|||||||
2 |
14 |
STP |
Y |
Y |
Y |
Y |
|
15 |
LA |
Y |
Y |
Y |
Y |
||
16 |
LLDP |
Y |
Y |
Y |
Y |
||
17 |
PNAC |
Y |
Y |
Y |
Y |
||
18 |
PBB |
N |
N |
Y |
Y |
||
19 |
PBB-TE |
N |
N |
Y |
Y |
||
|
|||||||
3 |
20 |
VLAN |
Y |
Y |
Y |
Y |
|
21 |
VRRP |
N |
Y |
N |
Y |
||
|
|||||||
4 |
22 |
IP |
Y |
Y |
Y |
Y |
|
23 |
IPV6 |
Y |
Y |
Y |
Y |
||
24 |
OSPF |
N |
Y |
N |
Y |
||
25 |
OSPFv3 |
N |
Y |
N |
Y |
||
26 |
RRD |
N |
Y |
N |
Y |
||
27 |
RRD6 |
N |
Y |
N |
Y |
||
28 |
Route Map |
N |
Y |
N |
Y |
||
|
|||||||
5 |
29 |
DHCP |
Y |
Y |
Y |
Y |
|
30 |
DHCPv6 |
Y |
Y |
Y |
Y |
||
31 |
RIP |
N |
Y |
N |
Y |
||
32 |
RIPv6 |
N |
Y |
N |
Y |
||
33 |
BGP |
N |
Y |
N |
Y |
||
|
|||||||
6 |
34 |
IGMP Snooping |
Y |
Y |
Y |
Y |
|
35 |
MLD Snooping |
Y |
Y |
Y |
Y |
||
36 |
IGMP |
N |
Y |
Y |
N |
||
37 |
IGMP Proxy |
Y |
Y |
Y |
Y |
||
38 |
PIM |
N |
Y |
N |
Y |
||
39 |
PIMV6 |
N |
Y |
N |
Y |
||
40 |
IPv4 Multicasting |
N |
Y |
N |
Y |
||
41 |
TAC |
Y |
N |
N |
Y |
||
42 |
RMON |
Y |
Y |
Y |
Y |
||
43 |
RMON2 |
Y |
Y |
Y |
Y |
||
44 |
FM |
Y |
Y |
Y |
Y |
||
|
|||||||
7 |
45 |
MLDv2 |
N |
Y |
N |
Y |
|
46 |
VXLAN |
N |
N |
N |
Y |
||
|
|||||||
8 |
47 |
Fulcrum_Draft |
NA |
NA |
NA |
NA |
|
48 |
Others_Draft |
NA |
NA |
NA |
NA |
||
49 |
QoSX_Draft |
NA |
NA |
NA |
NA |
||
Keyboard Shortcuts
• Up Arrow / Down Arrow - Displays the previously executed command.
•
Ctrl
+ C - Exits
from the SEFOS prompt.
•
Backspace
/ Ctrl + H
- Removes a single character.
•
TAB - Completes a command without
typing the full word.
•
Left
Arrow / Right Arrow
- Traverses the current line.
• ? - helps to list the available command.
• Q - exits and returns to the SEFOS prompt.
• History - displays the command history list.
Chapter 2
This section describes the configuration of Oracle SEFOS using the CLI.
The CLI can be used to configure the SEFOS from a console attached to the serial port of the switch or from a remote terminal using TELNET.
The Oracle SEFOS CLI supports a simple login authentication mechanism. The authentication is based on a user name and password provided by the user during login. The user root is created by default with password admin123.
Note:
A new user can be created or an existing user
can be deleted, and the user’s password or password of other users can be
modified, only if you log in as a root user.
When Oracle SEFOS is started, you must type the user name and password at the login
prompt to access the CLI shell.
Oracle Sun Ethernet Fabric Operating System
SEFOS Login:
root
Password:
********
SEFOS>
User-EXEC mode is now available to the user.
CLI command modes provide a detailed
description of the various modes available for SEFOS.
The
command prompt always displays the current mode.
CLI
commands need not be fully typed. The abbreviated forms of CLI commands are
also accepted by the Oracle SEFOS CLI. For example, commands like show ip
global config can be
typed as sh ip gl co.
CLI
commands are case insensitive.
CLI
commands are successful only if the dependencies are satisfied for a particular
command that is issued. The general dependency is that the module-specific
commands are available only when the respective module is enabled. Appropriate
error messages are displayed if the dependencies are not satisfied.
The
Ethernet type of an interface is determined during system startup. While
configuring interface-specific parameters, you must correctly specify the
interface’s Ethernet type. A fastethernet interface cannot be configured as a XL-ethernet interface and vice-versa.
Oracle CLI framework offers context-sensitive help. You can type a question mark (?) anytime during a session to get help. The help can be invoked in several ways. It is not displayed as a whole and is available only for the specific token from where it is invoked.
Examples
of possible scenarios:
0 You type a character followed immediately by a question mark (?). This action displays the current possible tokens without help string.
SEFOS(config)# bo?
Bootfile
1 You type a keyword at the command prompt and type a question mark (?) after a space. This action displays the next possible tokens along with the corresponding help string.
SEFOS(config)# service ?
dhcp DHCP related configuration
dhcp-relay DHCP relay related configuration
dhcp-server DHCP server related configuration
timestamps Timestamp configuration for logged
messages
Some of the basic concepts implemented for the context-sensitive help are:
• The next possible tokens are listed only in the lexical order and not in the order as available in the syntax or command structure.
• All possible tokens are listed along with the help string, even though the command is ambiguous. Any ambiguous command errors and value range errors are handled only during the execution of the command.
• The help tokens provided within <> brackets denote that you should type values of specified format. For example, <string(32)> indicates that you should type a string of size varying from 1 to 32.
• The help tokens provided within () brackets denote that you should type only the values represented. For example, (1-4094) indicates that you should type only those values within the mentioned range.
• The format is directly provided as help token for some non-keywords such as IP address, IP mask, MAC address, and so on. For example, aa:aa:aa:aa:aa:aa indicates that a MAC address of this format should be provided.
• Only the most commonly used format is provided as help token for some non-keywords, such as IPv6 address. But the command supports most of the valid formats. For example, AAAA::BBBB represents the IPv6 address, but the command accepts the format AAAA:B::BBBB.
• The help token <CR> along with help string explaining the operation of the command is displayed, if the command can be executed at that point (errors are handled only during the execution).
This section lists CLI
command modes and the access and exit methods to various general configuration
modes.
After
logging into the device, you are automatically in User EXEC mode. In general, you
can use the User EXEC commands to temporarily change terminal settings, perform
basic tests, and list system information.
Because
many of the privileged commands set operating parameters, privileged access is
password-protected to prevent unauthorized use. The password is not displayed
on the screen and is case-sensitive. Privileged EXEC mode prompt is the device
name followed by the hash (#) sign.
Global
Configuration commands apply to features that affect the system as a whole,
rather to any specific interface.
Use Switch
Configuration mode to perform switch-specific operations for multiple
instances. To enter in Switch Configuration mode from Global Configuration
mode, use the switch <context_name> command. To exit to Global
Configuration mode, use the exit command. To exit to Privileged EXEC mode, use the end command.
To enter Interface Configuration mode from Global Configuration mode, use the interface <interface-type><interface-id> command. To exit to Global Configuration mode, use the exit command. To exit to Privileged EXEC mode, use the end command.
The
Physical Interface mode is used to perform interface-specific operations. To
return to Global Configuration mode the exit command is used.
Use the
Port Channel Interface mode to perform port-channel-specific operations. To
return to Global Configuration mode, use the exit command.
Use VLAN
Interface mode to perform L3-IPVLAN-specific operations. To return to Global
Configuration mode, use the exit command.
Use Tunnel
Interface mode to perform Tunnel-specific operations. To return to Global
Configuration mode, use the exit command.
Use Out
of Band Interface mode to perform OOB interface-specific operations. To return
to Global Configuration mode, use the exit command.
To enter into Interface Range mode from Global Configuration mode,use the interface range ({<interface-type> <slot/port-port>} {vlan <vlan-id(1-4094)> - <vlan-id(2-4094)>}) command. To exit to Global Configuration mode, use the exit command. To exit to Privileged EXEC mode, use the end command.
Use this
mode to perform VLAN-specific operations. To enter into Config-VLAN mode from Global Configuration mode,
use the vlan vlan-id command. To return to Global Configuration mode, use the exit command.
Line
configuration commands modify the operations of a terminal line. These commands
are used to change terminal parameter settings line by line or range of lines.
To enter into Line Configuration mode from Global Configuration mode, use the line command. To exit to Global Configuration mode,use the exit command. To exit to Privileged EXEC mode, use the end
command.
Use this
mode to generate the slot information (module type). Use the reload command to restart the
switch.
Use this
mode to modify redundancy parameters. To return to Global Configuration mode,
use the exit command.
Use the Profile
Configuration mode to perform profile-specific operations. To enter Profile Configuration
mode from Global Configuration mode, use the ip mcast profile <profile-id> [description (128)] command. To exit to Global
Configuration mode, use the exit command. To exit to Privileged EXEC mode, use the end command.
The following are the specified protocol modes;
• PIM Component Mode
• Router Configuration Mode
• VRRP Router Configuration Mode
• VRRP Interface Configuration Mode
• DHCP Pool Configuration Mode
• Crypto Transform Configuration Mode
• Route Map Configuration Mode
• Client Information Configuration Mode
• IPv6 DHCP Pool Configuration Mode
• Vendor Specific Information Configuration Mode
• Service Instance Configuration Mode
• TE Service Instance Mode
• DiffSrv ClassMap Configuration Mode
• DiffSrv Policy-Map Configuration Mode
• DiffSrv Policy-Map Class Configuration Mode
• ACL Standard Access List Configuration Mode
• ACL Extended Access List Configuration Mode
• ACL MAC Configuration Mode
• IP Explicit Path Mode
• Routemap Configuration Mode
• Address Family Router Configuration Mode
• Pseudowire Redundancy Class Mode
Use PIM
Component mode to configure the PIM component. To enter PIM Component mode from
Global Configuration mode, use the ip pim
comp<componentid>
command. To exit to Global Configuration mode, use the exit command. To exit to Privileged EXEC mode, use the end command.
Use Router
Configuration mode to configure a router protocol. To enter Router
Configuration mode from Global Configuration mode, use the router<router protocol> command. To exit to Global
Configuration mode, use the exit command. To exit to Privileged EXEC mode, use the end command.
Use this
mode to configure the virtual router. To enter this mode, use the command router vrrp from Global Configuration mode. To
exit to Global Configuration mode, use the exit command. To exit to Privileged EXEC mode, use the end command.
Use VRRP
Interface Configuration mode to configure VRRP interfaces. To enter this mode,
use the interface
Vlan <vlan id>
command from VRRP Router Configuration mode. To exit to Virtual Router
Configuration mode, use the exit
command. To
exit to Privileged EXEC mode, use the end
command.
Use this
mode to configure the network pool or host configurations of a subnet pool.
The Global
Configuration mode ip dhcp pool
<integer(1-2147483647)> command creates a DHCP Server address pool and places the user in
DHCP Pool Configuration mode. The prompt for this mode is SEFOS(dhcp-config)#.
To
return to Global Configuration mode, use the exit command.
Use Crypto
Transform Configuration mode to configure IPSecv6. To enter this mode, use the crypto ipsecv6 command from Global Configuration mode.
To exit to Global Configuration mode the exit command is used. To exit to Privileged
EXEC mode, use the end command.
Use Route Map Configuration mode to configure route map
parameters. To enter this mode, use the route-map
<name(1-20)> [ {permit | deny } ] [ <seqnum(1-10)> ] command from Global Configuration mode.
To exit to Global Configuration mode, use the exit command. To exit to
Privileged EXEC mode, use the end command.
Use Client Information Configuration mode to configure DHCPv6 client information at the server side. To enter this mode, use the ipv6 dhcp authentication server client-id command from Global Configuration mode. The prompt for this mode is Your Product (config-d6clnt)#. To exit to Global Configuration mode, use the exit command. To exit to Privileged EXEC mode, use the end command.
Use IPv6 DHCP Pool Configuration mode to configure DHCPv6
server address pool information. To enter this mode, use the ipv6 dhcp pool command from Global
Configuration mode. The
prompt for this mode is SEFOS (config-d6pool)#. To exit to Global
Configuration mode, use the exit
command. To exit to Privileged EXEC mode,
use the end command.
Use Vendor Specific Information Configuration mode to configure vendor-specific information. To enter this mode, use the vendor-specific command from the IPv6 DHCP Pool Configuration mode. The prompt for this mode is SEFOS (d6pool-vendor)#. To exit to the IPv6 DHCP Pool Configuration mode, use the exit command. To exit to Privileged EXEC mode, use the end command.
Use Service Instance Configuration mode to perform ISID
specific operations. This mode is available inside Switch Configuration mode
when SEFOS is running in MI (Multiple Instance) mode. To enter this mode, use the service
instance <service-instance> command from Switch Configuration mode. To exit to Service
Instance Configuration mode, use the exit command.
Use TE Service Instance mode to configure an ESP in a TESI. To enter this mode, use the backbone
traffic-engineering service-instance <pbbte-sid> command
from Switch Configuration
mode. To exit to Switch Configuration mode, use the exit command.
The class-map
global configuration
command creates a class map for matching the packets to the class whose index
is specified. To enter ClassMap Configuration mode from Global Configuration
mode, use the class-map <short(1-65535)> command. The prompt for this mode is SEFOS (config-cmap)#.
To
return to Global Configuration mode, use the exit command.
Use Policy-Map
Configuration mode to create create or modify a policy map.
Use the Global
Configuration mode policy-map <short(1-65535)> command to enter DiffSrv Policy Map
Configuration. The prompt for this mode is SEFOS (config-pmap)#.
To return
to Global Configuration mode, use the exit command.
The Policy-Map
Class Configuration command defines a traffic classification for the policy to
act on. The class-map-num that is specified in the policy map ties the
characteristics for that class, and its match criteria as configured by using
the class-map Global Configuration command, to
the class map. Once the class command is entered, the switch enters Policy-Map Class Configuration
mode.
Use the
DiffSrv Policy mode policy-map <short(1-65535)> command to enter the DiffSrv
Policy-Map Class Configuration mode. The prompt for this mode is SEFOS
(config-pmap-c)#.
To
return to Global Configuration mode, use the exit command.
Standard
access lists create filters based on the IP address and network mask only (L3
filters only ).
Use the Global
Configuration mode ip access-list standard <(1-1000) command to create IP ACLs and to
enter ACL Standard Access List Configuration mode. The prompt for this mode is SEFOS
(config-std-nacl)#.
To
return to Global Configuration mode, use the exit command.
Extended
access lists enable specification of filters based on the type of protocol, range
of TCP/UDP ports, and the IP address and network mask (Layer 4 filters).
Use the Global
Configuration mode ip access-list extended
<(1001-65535)>
command to enter ACL Extended Access List Configuration mode. The prompt for
this mode is SEFOS (config-ext-nacl)#.
To
return to Global Configuration mode, use the exit command.
Use the
MAC Access-List Global Configuration command to create Layer 2 MAC ACLs, and
return MAC-Access List Configuration mode to you.
Use the Global
Configuration mode mac access-list extended
<(1-65535)>
command to enter ACL MAC Configuration mode. The prompt for this mode is SEFOS
(config-ext-macl)#.
To
return to Global Configuration mode, use the exit command.
Use IP Explicit Path mode to create an IP explicit path list. To enter this mode, ip explicit-path identifier command from Global Configuration mode. To exit to IP Explicit Path mode, use the exit command. To exit to Privileged EXEC mode, use the end command.
Use RouteMap Configuration Mode for route map configurations. To enter this mode, use the route-map <name> command from Global Configuration mode. To exit to Global Configuration mode, use the exit command. To exit to Privileged EXEC mode, use the end command.
Use Address Family Router Configuration mode to enter the address family submode. Within this submode, address-family-specific parameters for routing protocols, such as BGP, that can accommodate multiple Layer 3 address families can be configured. To enter this mode, use the address-family ipv4 / ipv6 command from Router Configuration mode. To exit to Router Configuration mode the exit command. To exit to Privileged EXEC mode, use the end command.
Use Pseudowire Redundancy Class mode to configure the parameters of a pseudowire redundancy class. To enter this mode, use the pseudowire-redundancy class <class_id (1-4294967295)> command from Global Configuration mode. To exit to Global Configuration mode, use the exit command. To exit to Privileged EXEC mode, use the end command.
Use SLA Configuration Mode to configure the parameters of a service-level agreement (SLA). To enter this mode, use the esat sla <sla-id (1-255)> command from Global Configuration mode. To exit to Global Configuration mode, use the exit command. To exit to Privileged EXEC mode, use the end command.
Use Traffic Profile Configuration mode to configure the
parameters of a traffic profile. To enter this mode, use the esat traffic-profile
<traffic-profile-id (1-255)> command
from Global Configuration mode. To exit to Global Configuration
mode, use the exit command. To exit to Privileged EXEC mode,
use the end command.
This chapter
describes the commands used to manage access permissions, mode access, and
terminal configurations on SEFOS.
Command Objective |
This command displays a brief description for the given command. To display help description for commands with more than
one word, do not provide any space between the words. |
Syntax |
help [ command ] |
Mode |
All Modes |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# help
enable Configure Terminal command must be
executed as SEFOS# help
configureterminal |
Command Objective |
This
command clears all the content from the screen. |
Syntax |
clear screen |
Mode |
All
Modes |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# clear
screen |
Command Objective |
This
command enters into default-level privileged mode. If
required, the user can specify the privilege level by enabling level with
password (login password) protection to avoid unauthorized users. Lower
privilege user can login to privilege mode 15 either with root user password
or with the password configured for the level 15 using the enable
password command. |
Syntax |
enable [<0-15> Enable Level] |
Parameter Description |
•
<0-15> Enable level
- Sets the privilege level
to enter the system. This value ranges from 0 to 15. ▪ Users with Privilege Level 0 can access only the following commands: • enable • disable • exit • help • logout This
is the most restricted level. ▪ Users with Privilege Level 1 can access all user-level commands with SEFOS> prompt. ▪ System allows configuring additional privilege levels (from level 2 to 14) to meet the needs of the users while protecting the system from unauthorized access. ▪ Users with Privilege Level 15 can access all commands. It is the least restricted level. |
Mode |
User
EXEC Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Default |
Enable
level - 15 |
Example |
SEFOS# enable
15 |
Related Command(s) |
• disable -Turns off privileged commands. •
enable password -
Modifies enable password parameters. |
Command Objective |
This
command turns off privileged commands. This value ranges between 0 and 15.
This value should be lesser than the privilege level value given in the enable command. |
Syntax |
disable [<0-15> Privilege level to go to] |
Mode |
User EXEC Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# disable
1 |
Related Command(s) |
enable - Enters Privileged EXEC mode. |
Command Objective |
This
command enters to Global Configuration mode which allows the user to execute
all the commands that supports Global Configuration mode. |
Syntax |
configure terminal |
Mode |
Privileged
EXEC Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS#
configure terminal SEFOS (config)# |
Related Command(s) |
• end - Exits from Configuration mode and enters Privileged Configuration mode. • exit - Exits current mode and reverts to the mode used prior to the current mode. |
Command Objective |
This
command enters Configuration mode. Configuration from memory or
network is not supported, when entered into Configuration mode using this
command. |
Note:
|
This
command is a complete standardized implementation of the existing command and
operates similar to that of the command configure terminal. |
Syntax |
configure |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS#
configure |
Related Command(s) |
• end - Exits from current mode and enters Privileged EXEC mode. • exit - Exits the current mode and reverts to the mode used prior to the current mode. |
Command Objective |
This command runs CLI commands from the specified script file. |
Syntax |
run script [flash: | slot0: |
volatile:] <script file> [<output file>] |
Parameter Description |
• flash: | slot0: | volatile: - Specifies the source of the script file. ▪ flash - The script file is read from the Flash memory. ▪ slot0 - The script file is read from the PCMCIA card or CompactFlash memory. Note: This feature has been included to adhere to the Industry Standard CLI syntax. This feature is currently not supported. ▪ volatile - The script file is read from the volatile memory. Note: This feature has been included to adhere to the Industry Standard CLI syntax. This feature is currently not supported. •
<script file>
- Specifies the script file
to be executed. • <output file> - Specifies the output file. |
Mode |
Privileged EXEC Mode. |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# run
script flash sample.js |
Command Objective |
This
command lists all the default and newly created users, along with their
permissible mode. |
Syntax |
listuser |
Mode |
Privileged
EXEC Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# listuser USER
MODE root
/ guest
/ |
Related Command(s) |
• show users - Displays information about terminal lines. • enableuser - Releases the blocked user specified by the username string. |
Command Objective |
This
command locks the CLI console. It allows the user or system administrator to
lock the console to prevent unauthorized users from gaining access to the CLI
command shell. Enter the login password to release the console lock and
access the CLI command shell. |
Syntax |
lock |
Mode |
Privileged
EXEC Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# lock |
Command Objective |
This
command creates a user and sets the password and the privilege level for the
user. The no
form of the command deletes the specified user. |
Syntax |
username <user-name>
[password [ 0 | 7 | LINE ] <passwd>] [privilege <1-15>]
[confirm-password [ 0 | 7 | LINE ] <passwd>] [status { enable | disable
}]no username < user-name > |
Parameter Description |
•
<user-name> -
Specifies the login user
name to be created. •
password [ 0 | 7 | LINE ]
<passwd> / confirm-password [ 0 | 7 | LINE ] <passwd> - Specifies the password to be entered by the user to login to the
system, and password encryption to be used. The size of the password entered
must be a minimum of 8 and maximum of 20 characters containing at least one
uppercase, one lowercase, one number, and one special character. The password
encryption options are: ▪ 0 - Uses the unencrypted password. ▪ 7 - Uses the hidden password. ▪ LINE - Uses the Line password. This feature has been included to adhere to the Industry Standard CLI syntax. This feature is currently not supported. •
privilege <1-15>
- Applies restriction to the user for accessing the CLI commands. This values
ranges between 1 and 15. For example, a user ID configured with privilege
level as 4 can access only the commands having privilege ID lesser than or
equal to 4. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Note:
|
• Only the root user can create new users using this command. • When a new user is created, the user can login with any username and the respective password. • Privilege ID is set as zero for all the show commands and is set as 15 for all the configuration commands in the def files. Root users can access all the commands and other users can access only the show commands. Users can change the privilege IDs of the commands in the def file to customize and segregate the commands as per requirements. |
Example |
SEFOS (config)#
username products password Prod@1234 privilege 15 The user product is created with the privilege level 15. Hence, the user will be visible to view all the commands. SEFOS (config)#
username support password Supp@123 privilege 1 The user support is created with the privilege level 1. Hence, the user will be visible to view only the following commands: • Show - Show commands related to all the features. • Enable - Enables the privilege level. • Disable - Disables the privilege level. • Exit • Logout • Clear • Debug • No Debug |
Related Command(s) |
• enable password - Modifies enable password parameters. • enable - Enters Privileged EXEC mode. • listuser – Lists all the users. • enableuser - Releases the blocked user specified by the username string. |
Command Objective |
This
command modifies enable password parameters. The no
form of the command disables enable
password
parameters. |
Syntax |
enable password [level (1-15)]
<LINE 'enable' password> no enable password [level (1-15)] |
Parameter Description |
• level(1-15) - Specifies the privilege level for which the password is to be set. The level ranges from 1 to 15. • <LINE 'enable' password> - Specifies the password to be enabled. Password should follow password configuration conventions. It should contain atleast one uppercase, one lowercase, one number, and one special character. |
Mode |
Global
Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Note:
|
• Only the root user can enable the password for any other blocked user using this command. • This command allows the root user to enable a password for other users to access the commands in the specified privilege level. The other users can access commands in the privilege level using the password enabled for that level. |
Example |
SEFOS (config)#
enable password level 1 Ad@123 |
Related Command(s) |
• username - Creates a user and sets the password for that user with the privilege level. • enable - Enters Privileged EXEC mode. |
Command Objective |
This
command identifies a specific line for configuration and enters Line Configuration
mode and allows the user to execute all the commands that supports Line Configuration
mode. |
Syntax |
line {console | vty |
<line-number(0-16)>}[<ending-line-number(3-16)>] |
Parameter Description |
•
console - Specifies the line for
configuration as console and enters console Line Configuration mode. •
vty - Specifies the line for
configuration as virtual terminal line. •
<line-number(0-16)>
- Specifies the ID of a
specific telnet session or initial telnet session in a configured series of
telnet sessions. This feature has been included to adhere to the
Industry Standard CLI syntax. This feature is currently not supported. • <ending-line-number(3-16)> - Specifies the ID of the last telnet session in a configured series of telnet sessions. This feature has been included to adhere to the Industry Standard CLI syntax. This feature is currently not supported. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS (config)#
line console SEFOS
(config-line)# |
Related Command(s) |
• end - Exits from Configuration mode and enters Privileged EXEC mode. • exit - Exits current mode and reverts to the mode used prior to current mode. •
show line - TTY
line information. |
Command Objective |
This
command replaces the given token by the given string. The no
form of the command removes the alias created for the given string. |
Syntax |
alias <replacement string>
<token to be replaced> no alias <alias> |
Parameter Description |
•
<replacement string>/
<alias> - Specifies
the string for which a replacement is needed. •
<token to be replaced>
- Specifies an abbreviated
or short form of the replacement string. |
Mode |
Global
Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS (config)#
alias products pdt |
Related Command(s) |
• show aliases - Displays the aliases. |
Command Objective |
This
command replaces the given token or command with the given string. This command is a standardized implementation of the existing command. It operates similar to that of the command alias-replacement, except that it allows the user to type a command with multiple tokens without quotes. |
Syntax |
alias {interface | exec |
configure} <alias-name> { command <max 10 tokens> | token } |
Parameter Description |
• interface - Specifies the commands executed in Interface Configuration mode. Note: This feature has been included to adhere to the Industry Standard CLI syntax. This feature is currently not supported. • exec - Specifies the commands executed in Privileged EXEC or User EXEC mode. Note: This feature has been included to adhere to the Industry Standard CLI syntax. This feature is currently not supported. • configure - Specifies the commands executed in Configuration mode (That is, global, line, profile, VLAN, switch, and protocol specific configuration modes). Note: This feature has been included to adhere to the Industry Standard CLI syntax. This feature is currently not supported. •
<alias-name>
- Specifies the alternate
name to be used for the command or token. •
command <max 10 tokens>
- Specifies the command and
token values for which alias name should be configured. • token - Specifies the token for which alias name should be configured. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Note:
|
Alias name can be set only for the commands having equal to or less than 10 tokens. |
Example |
SEFOS (config)# alias exec cltcp command clear tcp |
Related Command(s) |
show aliases - Displays the aliases. |
Command Objective |
This command removes the limit on number of unicast MAC entries indications to control. |
Syntax |
access-list provision mode {
consolidated | immediate } |
Parameter Description |
• consolidated - Configures the Provision mode as consolidated. • immediate - Configures the Provision mode as immediate. |
Mode |
Global Configuration Mode |
Package |
Workgroup, Enterprise, Metro, and Metro_E |
Default |
immediate |
Example |
SEFOS (config)#
access-list provision mode consolidated |
Command Objective |
This command triggers provisioning of active filter rules
to hardware based on configured priority. This command is applicable only
when provision mode is consolidated. Traffic flow would be impacted when
filter-rules are reprogrammed to hardware. |
Syntax |
access-list commit |
Mode |
Global Configuration Mode |
Package |
Workgroup, Enterprise, Metro, and Metro_E |
Example |
SEFOS (config)#
access-list commit |
Command Objective |
This
command sets a time (in seconds) for EXEC line disconnection. This value
ranges from 1 to 18000 seconds. The no
form of this command resets the EXEC timeout to its default value. |
Syntax |
exec-timeout <integer
(1-18000)> no exec-timeout |
Mode |
Line
Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Default |
integer
- 1800 seconds |
Example |
SEFOS
(config-line)# exec-timeout 100 |
Related Command(s) |
line - Configures a console or virtual
terminal line. |
Command Objective |
This
command exits from Privileged EXEC or User EXEC mode to SEFOS login prompt in
case of console session. In case of a telnet session, this command terminates
the session. |
Syntax |
logout |
Mode |
User
EXEC Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# logout SEFOS login: |
Command Objective |
This command
exits from the current mode to Privileged EXEC mode. |
Syntax |
end |
Mode |
All
modes |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# end |
Related Command(s) |
exit - Exits current mode and reverts to the
mode used prior to the current mode. |
Command Objective |
This
command exits the current mode and reverts to the mode used prior to
the current mode. |
Syntax |
exit |
Mode |
All
modes |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# exit |
Related Command(s) |
end - Exits from Configuration mode to
Privileged EXEC mode. |
Command Objective |
This
command shows the current user privilege level. |
Syntax |
show privilege |
Mode |
Privileged
EXEC Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# show
privilege Current privilege level is 15 |
Related Command(s) |
enable – Enters Privileged EXEC mode. |
Command Objective |
This
command displays TTY line information such as EXEC timeout. |
Syntax |
show line {console | vty
<line>} |
Mode |
Privileged
EXEC Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# show line console Current Session Timeout (in secs) = 1800 |
Related Command(s) |
• line - Configures a console or virtual terminal line. • exec-timeout – Sets a time (in seconds) for EXEC line disconnection. • clear line vty - Clears the console or virtual terminal line to an idle state. |
Command Objective |
This
command displays all the aliases. |
Syntax |
show aliases |
Mode |
Privileged
EXEC Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# show
aliases line -> li 1 products -> root alternatename -> newname |
Related Command(s) |
alias-replacement string - Replaces the
given token by the given string. |
Command Objective |
This
command displays the information about the current user. |
Syntax |
show users |
Mode |
Privileged
EXEC Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# show
users Line
User Peer-Address 0 con
root Local Peer |
Related Command(s) |
listuser - Lists all valid users, along with
their permissible mode. |
Command Objective |
This
command displays a list of recently executed commands. |
Syntax |
show history |
Mode |
Privileged
EXEC Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# show
history 35 configure terminal 36 password validate char lowercase 37 password validate uppercase 1 38 password validate lowercase 1 39 password validate numbers 1 40 password validate symbols 1 41 set minimum password length 8 42 set cli pagination on 43 enableuser products 44 end 45 configure terminal 46 password max-life-time 1 47 end 48
show users |
Command Objective |
This command configures the type of characters to be considered for password validation rules and takes values as bit mask. |
Syntax |
password validate char [lowercase]
[uppercase] [numbers] [symbols] |
Parameter Description |
• lowercase - Sets lowercase flag for password validation. •
uppercase - Sets
uppercase flag for password validation. • numbers - Sets numbers flag for password validation. • symbols - Sets symbols flag for password validation. |
Mode |
Global
Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Default |
All
flags are enabled |
Example |
SEFOS (config)#
password validate char lowercase |
Related Command(s) |
show password validate rules - Displays the password validation rules. |
Command Objective |
This
command configures the minimum number of uppercase characters that are
to be present in the password. If the given password has less than the
configured number of uppercase characters, it will not be allowed. This value
ranges from 0 to 20. |
Syntax |
password validate uppercase
[<count(0-20)>] |
Mode |
Global
Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Default Value |
1 |
Example |
SEFOS (config)
# password validate uppercase 1 |
Related Command(s) |
show password validate rules - Displays the password validation rules. |
Command Objective |
This
command configures the minimum number of lowercase characters that are
to be present in the password. If the given password has less than the
configured number of lowercase characters, it will not be allowed. This value
ranges from 0 to 20. |
Syntax |
password validate lowercase
[<count(0-20)>] |
Mode |
Global
Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Default Value |
1 |
Example |
SEFOS (config)
# password validate lowercase 1 |
Related Command(s) |
show password validate rules - Displays the password validation rules. |
Command Objective |
This
command configures the minimum numerical characters to be present in
the password. If the given password has less than the configured number of
numerical characters, it will not be allowed This value ranges from 0 to 20. |
Syntax |
password validate numbers
[<count(0-20)>] |
Mode |
Global
Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Default Value |
1 |
Example |
SEFOS (config)
# password validate numbers 1 |
Related Command(s) |
show password validate rules - Displays the password validation rules. |
Command Objective |
This
command configures the minimum number of special characters to be
present in the password. If the given password has less than the configured
number of symbols, it will not be allowed. This value ranges from 0 to 20. |
Syntax |
password validate symbols
[<count(0-20)>] |
Mode |
Global
Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Default Value |
1 |
Example |
SEFOS (config)
# password validate symbols 1 |
Related Command(s) |
show password validate rules - Displays the password validation rules. |
Command Objective |
This
command configures minimum password length. If the given password has
less than the configured password length, it will not be allowed. This value
ranges from 8 to 20. |
Syntax |
set minimum password length
<minimum-len> |
Mode |
Global
Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Default |
8 |
Example |
SEFOS (config)
# set minimum password length 8 |
Related Command(s) |
show minimum password length - Displays minimum password length. |
Command Objective |
This
command displays the password validation rules. |
Syntax |
show password validate rules |
Mode |
Privileged
EXEC Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# show
password validate rules Password Validation Mask : 1 Min Lowercase char count : 1 Min Uppercase char count : 1 Min Numeric char count : 1 Min Symbol char count : 1 |
Related Command(s) |
• password validate uppercase - Sets the minimum uppercase characters to be present in the password. • password validate lowercase - Sets the minimum lowercase characters to be present in the password. • password validate numbers - Sets the minimum numerical characters to be present in the password. • password validate symbols - Sets the minimum number of special characters to be present in the password. |
Command Objective |
This
command displays minimum password length. |
Syntax |
show minimum password length |
Mode |
Privileged
EXEC Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# show
minimum password length Minimum Password length
: 8 |
Related Command(s) |
• set minimum password length - Configures minimum password length. |
Command Objective |
This command configures the time, in days, after which the
user password expires. This value ranges from 0 to 366 days. The default
value of password-max-life-time is 0 days, which indicates the password does
not expire. |
Syntax |
password max-life-time [<days
(0-366)>] |
Mode |
Global
Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Default Value |
0 days |
Example |
SEFOS (config)
# password max-life-time 1 |
Related Command(s) |
• show password max-life-time - Displays the password expiry time. |
Command Objective |
This
command displays the password expiry time. |
Syntax |
show password max-life-time |
Mode |
Privileged
EXEC Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# show
password max-life-time Password Max
Life Time: 365 |
Related Command(s) |
• password max-life-time - Configures the maximum time after which the password expires. |
Command Objective |
This command clears the virtual terminal line to an idle state. |
Syntax |
clear line vty
{<line-number(2-9)> | all} |
Parameter Description |
• <line-number(2-9)> - Clears the vty information for the specified line. This value ranges from 2 to 9. • all - Clears all the vty information. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup, Enterprise, Metro, and Metro_E |
Example |
SEFOS# clear line vty all |
Related Command(s) |
• show line ---Displays the TTY line information. |
Command Objective |
This
command releases the blocked user specified by the user name string. |
Syntax |
enableuser <username> |
Mode |
Global
Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS (config)# enableuser user1 |
Note:
|
Only the root user can enable blocked users. |
Related Command(s) |
• username - Creates a user and sets the password for that user with the privilege level. • listuser – Lists all the users. |
Command Objective |
This
command enables or disables pagination. |
Syntax |
set cli pagination {on | off} |
Parameter Description |
•
on - Enables pagination. •
off - Disables pagination. |
Mode |
Global
Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS (config)# set cli pagination off |
SEFOS
offers a rich set of system features to a user, such as login services, copying
and writing facilities, duplex and negotiation support, and many other
capabilities. Some features have special hardware requirements and others have
special design considerations.
CFA (Common Forwarding Agent) is a proprietary module, which acts as a common forwarder of packets between the Network Protocol Module(s), the Data-Link Layer Protocol Layer Module(s), and the Device Drivers. CFA provides central management of the generic parameters of all the interfaces in the system.
Command Objective |
This
command configures the mode by which the default interface gets its IP
address. This configuration takes effect only on switch restart. |
Syntax |
default mode { manual | dynamic } |
Parameter Description |
•
manual - Assigns
static IP address to the default interface. The IP address and IP mask
configured by user are assigned to the default interface. • dynamic - Assigns dynamic IP address to the default interface. That is, IP address provided by the server in the network is assigned to the default interface on switch reboot. The IP address is fetched through the dynamic IP address configuration protocols such as DHCP client, RARP client, and BOOTP client. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
manual |
Example |
SEFOS(config)#
default mode dynamic |
Related Command(s) |
• show nvram- Displays the current information stored in the NVRAM. • default ip address allocation protocol - Configures the protocol by which the default interface acquires its IP address. • default ip address - Configures the IP address and subnet mask for the default interface. •
ip address –rarp/dhcp
- Configures the current VLAN or OOB interface to dynamically acquire an IP
address from the RARP or DHCP server. The no form of the command resets the
IP address for the interface to its default value. |
Command Objective |
This command
configures the path of the default restoration file from which the
configuration should be restored in the flash when the system is
restarted. |
Syntax |
default restore-file
<filename> |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
switch.conf |
Example |
SEFOS(config)# default
restore-file /home/automation/code/future/LR/switch1/restore.conf |
Related Command(s) |
•
show nvram -
Displays the current information stored in the NVRAM. |
Command Objective |
This
command sets the default VLAN ID to be used at reboot of the switch. This value is stored in
NVRAM and ranges between 1 and 4094. |
Syntax |
default
vlan id <count(1-4094)> |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
1 |
Example |
SEFOS(config)# default vlan id 32 |
Related Command(s) |
• show nvram - Displays the current information stored in the NVRAM. |
Command Objective |
This command configures the IP address and subnet mask for the default interface. |
Syntax |
default ip address
<ip-address> [ subnet-mask <subnet mask> ] [ interface
<interface-type> <interface-id> ] |
Parameter Description |
• <ip address> - Sets the IP address for the default interface / specified interface. If the network in which the switch is implemented contains a server such as DHCP server, dynamically allocating IP address, the configured IP address should not be within the range of the addresses that will be allocated by the server to the other switches. This precaution avoids creation of IP address conflicts between the switches. • subnet-mask <subnet mask> – Sets the subnet mask for the configured IP address. The configured subnet mask should be in the same subnet of the network in which the switch is placed • <interface-type> – Sets the IP address and / or subnet mask for the specified type of interface. The interface can be: ▪ fastethernet – Officially referred to as 100BASE-T standard. This is a version of LAN standard architecture that supports data transfer upto 100 Megabits per second. ▪ XL-ethernet – A version of LAN standard architecture that supports data transfer upto 40 Gigabits per second. Note: As of release 2.0.0.3, all interfaces are referred to as extreme-ethernet. ▪ extreme-ethernet – A version of Ethernet that supports data transfer upto 10 Gigabits per second. ▪ i-lan – Internal LAN created on a bridge per IEEE 802.1ap. • <interface-id> - Sets the IP address and subnet mask, or both, for the specified interface identifier. This is a unique value that represents the specific interface. This value is a combination of slot number and port number separated by a slash, for interface type other than i-lan. For example: 0/1 represents that the slot number is 0 and port number is 1. Only i-lan ID is provided for interface type i-lan. For example: 1 represents i-lan ID. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
•
ip
address - 10.0.0.1 •
subnet-mask
- 255.0.0.0 |
Example |
SEFOS(config)#
default ip address 20.0.0.1 subnet-mask 255.0.0.0 interface extreme-ethernet 0/1 |
Related Command(s) |
•
show nvram - Displays the current
information stored in the NVRAM. |
Command Objective |
This
command sets the IP address for an interface. The no form of the command resets the IP address of the interface to its default value. |
Syntax |
ip address <ip-address> <subnet-mask> no ip address
<ip-address> <subnet-mask> |
Parameter Description |
• <ip-address>/<ip_addr> - Sets the IP address for an interface. If the network in which the switch is implemented contains a server such as a DHCP server, dynamically allocating IP addresses, the configured IP address should not be within the range of the addresses that will be allocated by the server to the other switches. This precaution avoids creation of IP address conflicts between the switches. • <subnet-mask> - Sets the subnet mask for the configured IP address. The configured subnet mask should be in the same subnet of the network in which the switch is placed. Note: The parameters ip-address and subnet-mask are used implicitly in BCM Target. •
secondary - Sets the configured IP address as
an additional IP address for the interface (the configured address is used as
secondary address instead of primary address). Note:
This
parameter is not supported on OOB and PPP interface. |
Mode |
Interface
Configuration Mode This
command is applicable in VLAN Interface mode, Router Interface, OOB Interface
mode or PPP mode. |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
•
IP
address specified in issnvram.txt is taken as default for the default VLAN
identifier. • IP address is assigned as 0.0.0.0 and subnet mask as 255.255.255.255 for other interfaces. |
Note:
|
• The interface should be shut down before executing this command. • The primary and secondary IP address should be different. • Primary address should be configured before configuring the secondary address. • The connection to the switch is lost if the IP address of the connected interface is modified. •
When the same network interface is used for
OOB and NFS mounting, the operation done on OOB will have an impact on NFS. •
For PPP mode, PPP interface should be attached
to the physical interface first. |
Example |
SEFOS(config-if)# ip address 10.0.0.3 255.255.255.0 SEFOS(config-if)# ip address 10.0.0.2 255.255.255.0 secondary SEFOS (config-ppp)# ip address 17.0.0.100 255.255.255.0 |
Related Command(s) |
• show nvram - Displays the current information stored in the NVRAM. • show ip interface - Displays the IP interface configuration for all interfaces available in the switch. • shutdown – physical/VLAN/port-channel/tunnel Interface - Disables a physical interface, VLAN interface, port-channel interface, tunnel interface or OOB interface. • layer - Configures a virtual PPP link to a physical interface. |
Command Objective |
This command configures the port as switch port. Only switch port-related commands are made available for the interface, when the port is configured as switch port. The no form of the command resets the port as router port. Only router port-related commands are made available for the interface, when the port is configured as router port. |
Syntax |
switchport no switchport |
Mode |
Interface Configuration Mode |
Package |
Workgroup, Enterprise Metro, and Metro_E |
Default |
switchport |
Note:
|
The interface should be shut down before executing this command. |
Example |
SEFOS(config-if)#
switchport |
Related Command(s) |
• release - Releases the DHCP lease obtained for an IP address from a DHCP server, on the specified interface. • renew - Renews the DHCP lease for the interface specified. • ip dhcp relay circuit-id – Configures circuit ID value for an interface. • ip dhcp relay remote-id – Configures remote ID value for an interface. • show ip interface - Displays the IP interface configuration for all interfaces available in the switch. • switchport filtering-utility-criteria - Creates filtering utility criteria for the port. • switchport pvid - Configures the PVID on the specified port. • switchport acceptable-frame-type - Configures the type of VLAN-dependant BPDU frames such as GMRP BPDU, that the port should accept during the VLAN membership configuration. • switchport ingress-filter - Enables ingress filtering feature on the port. • switchport map protocols-group - Maps the configured protocol group to a particular VLAN ID for an interface. • switchport priority default - Configures the default ingress user priority for a port. • switchport mode - Configures the mode of operation for a switch port. • switchport protected - Enables switchport protection feature for a port. • port-vid - Configures the the VLAN identifier assigned to router-ports for association in the porting layer. |
Command Objective |
This command configures the protocol used by the default interface to acquire its IP address. This configuration takes effect only on rebooting the system. |
Syntax |
default ip address allocation
protocol {bootp | rarp | dhcp} |
Parameter Description |
•
bootp - Allows
the client device to obtain its own IP address, address of a server host, and
name of a boot file to be executed from a BOOTP server. • rarp - Allows the client device to dynamically find its IP address from RARP server, when it has only its hardware address such as MAC address. • dhcp - Allows the client device to obtain configuration parameters, such as network address, from the DHCP server. |
Mode |
Global Configuration Mode |
Package |
Workgroup, Enterprise Metro, and Metro_E |
Default |
dhcp |
Note:
|
• This command executes only if the default mode is configured as dynamic. • If the default interface is configured as OOB and if the same network interface is used for OOB and NFS mounting, then the operation done on OOB will have an impact on NFS. |
Example |
SEFOS(config)#
default ip address allocation protocol bootp |
Related Command(s) |
• default mode - Configures the mode by which the default interface acquires its IP address. • show nvram - Displays the current information stored in the NVRAM. |
Command Objective |
This
command configures the current VLAN / OOB interface to dynamically acquire an
IP address from the RARP / DHCP server. The no form of the command resets the IP address for the interface to its default value. |
Syntax |
ip address { dhcp |
rarp}[client-id { FastEthernet | extreme-ethernet | Port-channel | Vlan }
<interface_list>] [hostname <host_name>] no ip address |
Parameter Description |
• dhcp - Allows the client device to obtain configuration parameters such as network address, from the DHCP server. • rarp - Allows the client device to dynamically find its IP address from RARP server, when it has only its hardware address such as MAC address. • client-id - Sets the client identifier that specifies the interface type and hexadecimal MAC address of the specified interface. The various interface types that can be specified are: ▪ fastethernet - Officially referred to as 100BASE-T standard. This is a version of LAN standard architecture that supports data transfer upto 100 Megabits per second. ▪ extreme-ethernet - A version of Ethernet that supports data transfer upto 10 Gigabits per second. This Ethernet supports only full duplex links. ▪ port-channel - Logical interface that represents an aggregator which contains several ports aggregated together. ▪ vlan - Logical interface that specifies a group of hosts which can communicate with each other as in same broadcast domain. • <interface list> - Sets the list of interfaces or a specific interface identifier. This value is a combination of slot number and port number separated by a slash, for interface type other than port-channel and VLAN. Only VLAN or port-channel ID is provided, for interface types VLAN and port-channel. Use comma as a separator without space while configuring list of interfaces. Example: 0/1,0/3 or 1,3. Feature not supported - This feature has been included to adhere to the Industry Standard CLI syntax. This feature is currently not supported. • hostname - Sets the name of the host from which the IP address is to be acquired dynamically. Feature not supported - This feature has been included to adhere to the Industry Standard CLI syntax. This feature is currently not supported. |
Mode |
Interface Configuration Mode (VLAN) |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
dhcp |
Note:
|
When the same network interface is used for OOB and NFS
mounting, the operation done on OOB will have an impact on NFS. |
Example |
SEFOS(config-if)#
ip address dhcp |
Related Command(s) |
• show ip dhcp client stats - Displays the DHCP client statistics information for interfaces that are configured to acquire IP address dynamically from the DHCP server. • release - Releases the DHCP lease obtained for an IP address from a DHCP server, on the specified interface. • renew - Renews the DHCP lease for the interface specified. |
Command Objective |
This
command configures the base MAC address for the switch in the NVRAM. The switch uses this address as its hardware address.
Layer 3 modules use the switch MAC address as the source MAC address in the
transmitted packets. This
configuration takes effect only when the switch is restarted. |
Syntax |
base-mac <mac_address> |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
00:01:02:03:04:05 |
Example |
SEFOS(config)#
base-mac 00:89:fe:34:55:33 |
Related Command(s) |
• show nvram - Displays the current information stored in the NVRAM. • show spanning-tree - Summary, Blockedports, Pathcost, Redundancy - Displays spanning tree-related information available in the switch for the current STP enabled in the switch. • show spanning-tree detail - Displays detailed spanning tree-related information of the switch and all ports enabled in the switch. • show spanning-tree active - Displays spanning tree-related information available in the switch for the current STP enabled in the switch. • show spanning-tree interface - Displays the port-related spanning tree information for the specified interface. • show spanning-tree root - Displays the spanning tree root information. • show spanning-tree bridge - Displays the spanning tree bridge information. • show spanning-tree – layer 2 gateway port - Displays spanning tree information for all L2GPs enabled in the switch. • name - Configures the name for the MST region. • show spanning-tree mst - CIST or specified mst Instance - Displays multiple spanning tree information for all MSTIs in the switch. • show spanning-tree vlan - Summary, Blockedports, Pathcost - Displays PVRST-related information for the specified VLAN. • show spanning-tree vlan - bridge - Displays the PVRT-related information of the bridge for the specified VLAN ID. • show spanning-tree vlan - root - Displays the PVRT-related information of the root for the specified VLAN ID. • show spanning-tree vlan - interface - Displays interface-specific PVRST information for the specified VLAN. |
Command Objective |
This
command configures the authentication method for user logins for
accessing the GUI to manage the switch. Few network routers and other network equipment allow
access to a server or a managing computer to determine if the user attempting
to log in has the proper rights or is in the user database. The no form of the command resets the authentication method for user logins to its default values. Changing login authentication from default to another value may disconnect the telnet session. |
Syntax |
login authentication [{radius |
tacacs }] [local] no login authentication |
Parameter Description |
•
radius - Sets
the RADIUS server to be used as an authentication server. Enables remote
access servers to communicate with a central server to authenticate dial-in
users and authorize their access to the requested system or service. Note:
Note: RADIUS user will be given privilege
based on service type attribute value received in access accept packet from
radius server •
tacacs - Sets
the TACACS server to be used as an authentication server. Communicates with
the authentication server commonly used in networks. Note:
Note: TACACS user will be given root privilege
by default or local user privilege if the user exists in local database. • local - Sets locals authentication. The user identification, authentication, and authorization method is chosen by the local system administration and does not necessarily comply with any other profiles. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
Local |
Example |
SEFOS(config)#
login authentication radius |
Related Command(s) |
• username - Creates a user and sets the enable password for that user with the privilege level. • no enable password - Deletes a user and disables enable password parameters. • show system information - Displays system information. |
Command Objective |
This
command configures the authentication method for user logins for
accessing the GUI to manage the switch. Few network routers and other network
equipment allows access to a server or a managing computer to determine if
the user attempting to log in has the proper rights or is in the user
database. Changing login authentication from default to another value may disconnect the telnet session. The no form of the command resets the authentication method for user logins to its default values. |
Note: |
This command is a standardized implementation of the
existing command. It operates similar to that of the command login authentication. |
Syntax |
login authentication { default |
<list-name> } no login authentication { default
| <list-name> } |
Parameter Description |
• default - Sets the default authentication method for user logins. • <list-name> - Uses the list of user names created with the username command, for authentication. Note: This feature has been included to adhere to the Industry Standard CLI syntax. This feature is currently not supported. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS(config)#
login authentication default |
Related Command(s) |
• username - Creates a user and sets the enable password for that user with the privilege level. • no enable password - Deletes a user and disables enable password parameters. •
show system information
- Displays system information. |
Command
Objective |
This command configures an IP
authorized manager. The no form of the command removes manager from authorized managers list. |
Syntax |
authorized-manager ip-source <ip-address>
[{<subnet-mask> | / <prefix-length(1-32)>}] [interface
[interface-type <0/a-b, 0/c, ...>] [interface-type <0/a-b, 0/c,
...>]] [<interface-type <a,b or a-b or a,b,c-d...>]] [vlan
<a,b or a-b or a,b,c-d>] [cpu0] [service [snmp] [telnet] [http] [https]
[ssh]] no authorized-manager ip-source < ip-address >
[{<subnet-mask > | / <prefix-length(1-32)>}] |
Parameter
Description |
• <ip-address> - Sets the network or host address from which the switch is managed. An address 0.0.0.0 indicates 'Any Manager'. • <subnet-mask> - Sets the subnet mask for the configured IP address. The configured subnet mask should be in the same subnet of the network in which the switch is placed. • <prefix-length(1-32)> - Configures the number of high-order bits in the IP address. These bits are common among all hosts within a network. This value ranges from 1 to 32. • interface - Configures the network or host address for the specified interface. The details to be provided are: ▪ interface-type - Sets the type of interface. The interface can be: • fastethernet – Officially referred to as 100BASE-T standard. This is a version of LAN standard architecture that supports data transfer upto 100 Megabits per second. • XL-ethernet – A version of LAN standard architecture that supports data transfer upto 40 Gigabits per second. • extreme-ethernet – A version of Ethernet that supports data transfer upto 10 Gigabits per second. • i-lan – Internal LAN created on a bridge per IEEE 802.1ap. ▪ interface-type <0/a-b, 0/c, ...> - Sets the list of interfaces or a specific interface identifier. This value is a combination of slot number and port number separated by a slash, for interface type other than i-lan. Only i-lan ID is provided for interface type i-lan. Use comma as a separator without space while configuring list of interfaces. Example: 0/1,0/3 or 1,3. • <interface-type <a,b or a-b or a,b,c-d...> - Configures the network or host address for the specified port-channel interface. Port-channel is a Logical interface that represents an aggregator which contains several ports aggregated together.Configures the port-channel interface identifier. This is a unique value that represents the specific interface. Only port-channel ID is provided port-channel. For example: 1 represents port-channel ID. Use comma as a separator without space while configuring list of interfaces. Example: 1, 2, 3 or 1-3. •
vlan <a,b or a-b or
a,b,c-d> - Sets
the list of VLANs or a single specifc VLAN in which the IP authorized manager
can reside. • cpu0 - Configures the access rights for the manager of the switch through OOB Port. •
service - Configures
the type of service to be used by the IP authorized manager. The values can
be: • ssh - Logs into another computer over a network to execute commands in a remote machine, and to move files from one machine to another. It provides strong authentication and secure communications over insecure channels. It is a replacement for rlogin, rsh, rcp, and rdist. SSH protects a network from attacks such as IP spoofing, IP source routing, and DNS spoofing. An attacker who has managed to take over a network can only force SSH to disconnect. He or she cannot play back the traffic or hijack the connection when encryption is enabled. • http - Defines how messages are formatted and transmitted, and what actions web servers and browsers should take in response to various commands. For example, when you enter a URL in your browser, this actually sends an HTTP command to the web server directing it to fetch and transmit the requested web page. • https – Transmits data securely over the World Wide Web. S-HTTP is designed to transmit individual messages in a secure manner. • snmp - Manages complex networks. SNMP works by sending messages, called PDUs, to different parts of a network. SNMP-compliant devices, called agents, store data about themselves in MIBs and return this data to the SNMP requesters. |
Mode |
Global Configuration Mode |
Package |
Workgroup, Enterprise Metro, and
Metro_E |
Default |
All services are allowed for the
configured manager |
Example |
SEFOS(config)# authorized-manager ip-source 10.203.113.5 255.255.255.255 interface extreme-ethernet 0/1 vlan 1 service snmp |
Related
Command(s) |
• show authorized managers - Displays the configured authorized managers. |
Command Objective |
This
command sets the HTTP port. This port is used to configure the router
using the Web interface. This
value ranges from 1 to 65535. The no
form of the command resets the HTTP port to its default value. |
Syntax |
ip http port <port(1-65535)> no ip http port |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
80 |
Note:
|
HTTP port number configuration takes effect only when HTTP
is disabled and enabled again. |
Example |
SEFOS(config)#
ip http port 90 |
Related Command(s) |
• set ip http - Enables or disables HTTP. • show http server status - Displays the HTTP server status. |
Command Objective |
This command enables or disables HTTP in the switch. |
Syntax |
set ip http {enable | disable} |
Parameter Description |
• enable - Enables HTTP in the switch. • disable - Disables HTTP in the switch. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
enable |
Example |
SEFOS(config)#
set ip http disable |
Related Command(s) |
• ip http port - Sets the HTTP port. •
show http server status
- Displays the HTTP server status. |
Command Objective |
This
command performs an image download operation on a switch stack or on a
stand-alone switch. The command downloads a new image from a TFTP or SFTP, from a remote
location to the switch, and overwrites or keeps the existing image. |
Syntax |
archive download-sw /overwrite [
/reload ] { tftp://server/filename |
sftp://<user-name>:<pass-word>@server/filename | flash:filename} |
Parameter Description |
•
/overwrite - Overwrites the software image in
flash with the downloaded one. This option should be specified only if the
flash device has sufficient space to hold two images. •
/reload - Reloads
the system after successfully downloading the image unless the configuration
has been changed and not been saved. Note:
This feature has been included to adhere to
the Industry Standard CLI syntax. This feature is currently not supported. • tftp://server/filename - Configures the source URL and filename used to overwrite or update the existing image. The file is transferred using TFTP. •
sftp://<user-name>:<pass-word>@server/filename
- Configures the source
URL, user name, password, and filename used to overwrite or update the
existing image. The file is transferred using SFTP. • flash:filename - Configures the name of the flash file used to overwrite or update the existing image. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Note:
|
Filenames and directory names are case sensitive. |
Example |
SEFOS# archive download-sw /overwrite tftp://20.0.0.1/SEFOS.exe Download is in Progress... |
Command Objective |
This
command allows configuring interface such as out-of-band management, port
channel, tunneling and so on. The no form of the command deletes interface such as VLAN, port-channel, tunnel interface and so on. |
Syntax |
WGS enabled in the switch interface {cpu0 | VlanMgmt |
port-channel <port-channel-id (1-65535)> | tunnel <tunnel-id
(0-128)> | <interface-type> <interface-id> | linuxvlan
<interface-name >| ppp <1-128>} no interface { vlanMgmt |
Port-Channel <port-channel-id(1-65535)> | tunnel <tunnel-id
(0-128)> | linuxvlan <interface-name> | ppp <1-128)>} WGS disabled in the switch interface
{cpu0 | vlan <vlan-id/vfi-id> |
port-channel <port-channel-id (1-65535)> | tunnel <tunnel-id
(0-128)> | <interface-type> <interface-id> | linuxvlan
<interface-name> | loopback <interface-id (0-100)> | ppp
<1-128> | pw <interface-id (1-65535)>| ac <integer
(1-65535)> | sisp <interface-id (1-65535)>| virtual <integer
(1-16777214)>| nve
<integer (1-65535)>} no
interface { vlan <vlan-id/vfi-id> |
port-channel <port-channel-id(1-65535)> | tunnel <tunnel-id
(0-128)> | <interface-type> <interface-id> | linuxvlan
<interface-name> | loopback <interface-id (0-100)> | ppp
<integer (1-128)> | pw <integer (1-65535) | ac <integer
(1-65535)> | sisp <interface-id(1-65535)>| virtual <integer
(1-16777214)> [graceful-deletion} | nve <integer (1-65535)>} |
Parameter Description |
• cpu0 - Configures the access rights for the manager of the switch through OOB Port. • VlanMgmt - Configures the management VLAN interface. • vlan <vlan-id/vfi-id> - Configures the specified VLAN ID. This is a unique value that represents the specific VLAN or VFI created or to be created. This value ranges from 1 to 65535. ▪ <vlan –id> - VLAN ID is a unique value that represents the specific VLAN. This value ranges from 1 to 4094. ▪ <vfi-id> - VFI ID is a VLAN created in the system which contains pseudowires and attachment circuits as member ports. This creates a logical LAN for the VPLS service. This value ranges from 4096 to 65535. Note: The VLAN ID 4095 is reserved and may be used to indicate a wildcard match for the VID in management operations or filtering database entries. Note: The theoretical maximum for the maximum number of VFI is 65535 but the actual number of VFI supported is a sizing constant. Based on this, the maximum number of VFI ID accepted in the management interface is restricted. For example if 100 VFIs are supported, the maximum number of VFI supported will be restricted to hundred added to the maximum number of VLANs. An error message is displayed for any value beyond this range. • port-channel<port-channel-id (1-65535)> - Configures the port to be used by the host to configure the router. This value ranges from 1 to 65535. The port channel identifier can be created or port channel-related configuration can done, only if the LA feature is enabled in the switch. • tunnel<tunnel-id (0-128)> - Configures the tunnel interface. This value ranges from 0 to 128. • <interface-type> - Configures the specified type of interface. The interface can be: ▪ fastethernet – Officially referred to as 100BASE-T standard. This is a version of LAN standard architecture that supports data transfer upto 100 Megabits per second. ▪ XL-ethernet – A version of LAN standard architecture that supports data transfer upto 40 Gigabits per second. ▪ extreme-ethernet – A version of Ethernet that supports data transfer upto 10 Gigabits per second. ▪ i-lan – Internal LAN created on a bridge per IEEE 802.1ap. ▪ port-channel – Logical interface that represents an aggregator which contains several ports aggregated together. • <interface-id> - Configures the specified interface identifier. This is a unique value that represents the specific interface. This value is a combination of slot number and port number separated by a slash, for interface type other than i-lan and port-channel. For example: 0/1 represents that the slot number is 0 and port number is 1. Only i-lan or port-channel ID is provided, for interface types i-lan and port-channel. For example: 1 represents i-lan and port-channel ID. • linuxvlan<interface-name> - Configures the interface name of the Linux VLAN Interface. • loopback<interface-id (0-100)> - Configures the loopback identifier. This value ranges from 0 to 100. •
ppp <1-128>
- Configures interfaces of
the point to point protocol. This value ranges from 1 to 128. • pw <interface-id (1-65535)> - Configures interfaces of the pseudowire. This value ranges from 1 to 65535. Maximum number of pseudowire interfaces supported in the system is 100. • ac <integer (1-65535)> - Configures the Attachment Circuit identifier in the system. Attachment Circuit (AC) is a physical or virtual circuit attaching a Customer Edge to a Provider Edge port. This value ranges from 1 to 65535. • sisp<interface-id(1-65535)> - Configures the SISP identifier. This value ranges from 1 to 65535. Note: This feature has been included to adhere to the Industry Standard CLI syntax. This feature is currently not supported. • virtual<integer (1-65535)> - Configures the virtual interface identifier. This value ranges from 1 to 65535. Note: This option is available, only when PBB feature is enabled. The WGS enable feature is currently not supported. • nve <integer (1-65535) - Configures the NVE (Network Virtualization Endpoint) interface identifier. This value ranges from 1 to 65535. Note: This option is available, only when VXLAN feature is enabled. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Note:
|
•
The command no shutdown must
be executed for the interface to be active. •
Logical interfaces cannot be created in the
switch, if the base bridge mode is configured as transparent bridging. |
Example |
SEFOS(config)#
interface tunnel 0 SEFOS(config-if)# |
Related Command(s) |
• shutdown port-channel - Shuts down LA in the switch and releases the allocated resources to the switch. • set port-channel - Configures the admin status of LA in the switch. • port-channel load-balance - Configures the load balancing policy for all port channels created in the switch. • channel-group - Adds the port as a member of the specified port channel that is already created in the switch. • show etherchannel - Displays Etherchannel information for all port-channel groups created in the switch. • show lacp - Displays LACP counter or neighbor information for all port channels. • show interfaces - Displays the interface status and configuration • base bridge-mode - Configures the mode in which the VLAN feature should operate on the switch. • show interface - counters - Displays the interface statistics for each port. |
Command Objective |
This
command configures the Maximum Transmission Unit frame size for all the
frames transmitted and received on all the interfaces in a switch. The size
of the MTU frame size can be increased using this command. The value ranges
from 90 to 9216. When QCA flag is set as No, this value ranges from 46 to
9216. For PPP interface, this value ranges from 90 to 9202. This value defines the largest PDU that can be passed by
the interface without any need for fragmentation. This value is shown to the
higher interface sub-layer and should not include size of the encapsulation
or header added by the interface. This value represents the IP MTU over the interface,
if IP is operating over the interface. |
Syntax |
When QCA_WANTED is set as No while compiling exe mtu <frame-size(90-9216)> When QCA_WANTED is set as Yes while compiling exe mtu <frame-size(46-9216)> For PPP Interface Configuration mtu <frame-size(90-9202)> |
Mode |
Interface Configuration Mode (VLAN / Physical/ Port channel) |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
1500 |
Note:
|
• This configuration can be done, only if the interface is administratively down. •
The MTU value should not be greater than 1500
for fastethernet interface. •
Any messages larger than the MTU are divided
into smaller packets before transmission •
For PPP, the interface must be attached to an
underlying physical interface. |
Example |
SEFOS(config-if)# mtu 900 |
Related Command(s) |
• show interfaces - Displays the interface status and configuration. • show interface mtu - Displays the global Maximum Transmission Unit. • shutdown-physical/VLAN/port-channel/tunnel Interface – Enables the physical interface, VLAN interface, port channel interface, tunnel interface, or OOB interface. • layer - Configures a virtual PPP link to a physical interface. |
Command Objective |
This
command configures the Maximum Transmission Unit frame size for all the
frames transmitted and received on all the interfaces in a switch. This
value defines the largest PDU that can be passed by the interface without any
need for fragmentation. This value is shown to the higher interface sub-layer
and should not include size of the encapsulation or header added by the
interface. This value represents the IP MTU over the interface, if IP is
operating over the interface.This
value ranges from 90 to 9216. The no form of this command sets the Maximum Transmission Unit to the default value in all interfaces. |
Note:
|
This command is a standardized implementation of the existing command. It operates similar to that of the command mtu frame size. |
Syntax |
system mtu
<frame-size(90-9216)> no system mtu |
Mode |
Global Configuration mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
1500 |
Note:
|
• This configuration can be done, only if the interface is administratively down. • Any messages larger than the MTU are divided into smaller packets before transmission |
Example |
SEFOS(config)#
system mtu 200 |
Related Command(s) |
• show interfaces - Displays the interface status and configuration. • show interface mtu - Displays the global Maximum Transmission Unit. |
Command Objective |
This command enables loopback on a physical interface. The no form of this command disables the loopback on a physical interface. |
Syntax |
loopback local no loopback local |
Mode |
Interface Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS(config-if)#
loopback local |
Related Command(s) |
• show interfaces - Displays the interface status and configuration. |
Command Objective |
This command configures the system-specific index for the port. It provides a different numbering space other than the IfIndex to identify ports. This value ranges from 1 to 16384. If no other value has been configured, 0 is set by default. |
Syntax |
system-specific
port-id <integer (1-16384)> |
Mode |
Interface Configuration Mode |
Package |
Workgroup, Enterprise Metro, and Metro_E |
Default |
0 |
Example |
SEFOS(config-if)# system-specific port-id 50 |
Related Command(s) |
•
show system-specific
port-id - Displays the custom-param
configurations. |
Command Objective |
This command configures the custom parameters for a particular port. The no form of the command deletes the custom parameter configurations. |
Syntax |
set
custom-param {type <integer> length <integer> value
<string> | attribute <integer (1-4)> value <integer
(0-4294967295)>} no
custom-param [type <integer>] [attribute <integer (1-4)>] |
Parameter Description |
• type - Sets the type of the TLV information. • length - Sets the length of the TLV information. • value - Sets the value of the TLV information. • attribute - Sets the opaque attribute ID configured on the port. This value ranges from 1 to 4. • value - Sets the value for the opaque attribute. This value ranges from 0 to 4294967295. |
Mode |
Interface Configuration Mode |
Package |
Workgroup, Enterprise Metro, and Metro_E |
Default |
value - 0 |
Example |
SEFOS(config-if)# set custom-param attribute 2 value 40 |
Related Command(s) |
•
show custom-param - Displays the custom-param
configurations. |
Command Objective |
This command configures unicast MAC address for the interface. |
Syntax |
mac-addr
<aa:aa:aa:aa:aa:aa> |
Mode |
Interface Configuration Mode |
Package |
Workgroup, Enterprise Metro, and Metro_E |
Default |
MAC address of the switch is assigned as
MAC address for the interface. |
Note:
|
• The MAC address can be set only when ifMainAdminStatus for the interface is down. • The object is valid only for interfaces that have the ifMainType set as ethernetCsmacd(6) or ieee8023ad(161). |
Example |
SEFOS(config-if)# mac-addr 00:22:33:44:55:66 |
Related Command(s) |
• show interfaces - Displays the interface status and configuration. |
Command Objective |
This
command enables trap generation on the interface. The interface generates
linkUp or linkDown trap. The linkUp trap denotes that the
communication link is available and ready for traffic flow. The linkDown trap
denotes that the communication link failed and is not ready for traffic flow. The no
form of this command disables trap generation on the interface. |
Syntax |
snmp trap link-status no snmp trap link-status |
Mode |
Interface Configuration Mode / PPP Interface Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
SNMP
trap link status is enabled. |
Example |
SEFOS(config-if)# snmp trap link-status SEFOS(config-ppp)# snmp trap link-status |
Related Command(s) |
•
show interfaces - Displays the interface status
and configuration. |
This
command writes the running-config to a flash file, startup-configuration file,
or to a remote site. |
|
Syntax |
write
{ flash:filename | startup-config | tftp://server/filename |
sftp://<user-name>:<pass-word>@server/filename} |
Parameter Description |
• flash:filename - Configures the name of the file to which the configuration is to be saved. This file is present in the flash. •
startup-config -
Starts the switch with the saved
configuration on reboot. •
tftp - Configures the TFTP-related
details for writing the configuration to a file in TFTP server. ▪ server - The IP address or host name of the server in which configuration should be maintained. ▪ filename - The name of the file in which the configuration should be written. •
sftp - Configures the SFTP-related details
for writing the configuration to a file in SFTP server. ▪ user-name - The user name of remote host or server. ▪ pass-word – The password for the corresponding user name of remote host or server ▪ server - The IP address or host name of the server in which configuration should be maintained. ▪ filename - The name of the file in which the configuration should be written. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Note: |
Filenames and directory names are case
sensitive |
Example |
SEFOS# write startup-config |
Related Command(s) |
•
copy startup-config
- Copies variables from the running configuration to the startup
configuration file in NVRAM. • show nvram - Displays the current information stored in the NVRAM. •
show system information -
Displays system information. |
Command Objective |
This
command copies the configuration from a remote site to flash. |
Syntax |
copy { tftp://server/filename startup-config |
sftp://<user-name>:<pass-word>@server/filename startup-config |
flash: filename startup-config } |
Parameter Description |
• tftp://server/filename startup-config - Configures the address from which the file is to be copied and the file name from which configuration is to be copied. This option configures the TFTP server details. • sftp://<user-name>:<pass-word>@server/filename - Configures the name of the file in remote location to be copied (downloaded) into configuration file (switch.conf). This option configures the SFTP server details. • flash: filename startup-config - Configures the name of the file in flash. The configuration in the flash file is used. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Note: |
Filenames and directory names are case sensitive |
Example |
SEFOS# copy flash:clcliser
startup-config |
Command Objective |
This
command copies the the running configuration to the startup
configuration file in NVRAM, where the running-config is the current
configuration in the router and the startup config is the configuration that
is loaded when the router boots up. This command takes a backup of the initial configuration in flash or at a remote location. |
Syntax |
copy startup-config {flash:
filename | tftp://server/filename |
sftp://<user-name>:<pass-word>@server/filename} |
Parameter Description |
• flash: filename - Configures the name of the file in which the initial configuration should be stored. This file is available in the flash. •
tftp://server/filename
- Configures the TFTP
details for taking backup of initial configuration in TFTP server. ▪ server - The IP address or host name of the server. ▪ filename - The name of the file in which the initial configuration should be stored. •
sftp://<user-name>:<pass-word>@server/filename
- Configures the SFTP
details for taking backup of initial configuration in SFTP server. ▪ user-name - The user name of remote host or server. ▪ pass-word – The password for the corresponding user name of remote host or server. ▪ server - The IP address or host name of the server. ▪ filename - The name of the file in which the initial configuration should be stored. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Note: |
Filenames and directory names are case sensitive |
Example |
SEFOS# copy
startup-config flash:clcliser |
Related Command(s) |
• copy running-config startup-config - Copies variables from the running configuration to the startup configuration file in NVRAM. •
write - Writes
the running-config to a file in flash, startup-configuration file, or to a
remote site. • copy-file - Copies a file from a source remote site or flash to a destination remote site or flash. |
Command Objective |
This
command copies the variables from the running configuration
to the startup configuration file in NVRAM, where the running-config is the
current configuration in the router and the startup config is the
configuration that is loaded when the router boots up. |
Note: |
This
command takes a backup of the initial configuration in flash or at a remote
location. This command is a complete standardized implementation of
the existing command. It operates similar to that of the command copy
startup-config. |
Syntax |
copy running-config startup-config |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS#
copy running-config
startup-config |
Related Command(s) |
• copy startup-config - Copies variables from the running configuration to the startup configuration file in NVRAM. • copy-file
- Copies a file from a source
remote site or flash to a destination remote site or flash. |
Command
Objective |
This command writes the system
logs to a remote site. |
Syntax |
copy logs {tftp://server/filename |
sftp://<user-name>:<pass-word>@server/filename} [standby] |
Parameter
Description |
•
tftp://server/filename
- Configures
the TFTP details for taking backup of system logs in TFTP server. ▪ ip-address - Configures the IP address or host name of the TFTP server. ▪ filename - Configures name of the file in which the system logs should be stored. •
sftp://<user-name>:<pass-word>@server/filename
- Configures
the SFTP details for taking backup of system logs in SFTP server. ▪ user-name - Configures the user name of remote host or server. ▪ pass-word – Configures password for the corresponding user name of remote host or server. ▪ server - Configures the IP address or host name of the server. ▪ filename - Configures the name of the file in which the system logs should be stored. • standby - Copies the received peer log to server. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup, Enterprise Metro, and
Metro_E |
Note: |
Filenames
and directory names are case sensitive |
Example |
SEFOS# copy logs
tftp://12.100/log.txt standby Log Upload Successful |
Command Objective |
This command performs firmware upgrade using TFTP from a remote location. |
Syntax |
firmware upgrade { tftp://server/filename} {flash:normal |
flash:fallback} |
Parameter Description |
• tftp://server/filename - Configures the file to be used for firmware upgrade and its source URL. ▪ server - IP address or host name of the TFTP server. ▪ filename - The name of the file to be used for firmware upgrade. Filenames and directory names are case sensitive. • flash:normal - Sets the flash in normal image. • flash:fallback - Sets the fallback image in flash. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Note:
|
In stacking environment case, this command copies the
image to the attached peers. |
Example |
SEFOS# firmware
upgrade tftp://12.0.0.100/Ramdisk.bin flash:normal |
Command Objective |
This
command copies a file from a source remote site or flash to a destination
remote site or flash. The entire copying process takes several minutes
and differs from protocol to protocol and from network to network. |
Syntax |
copy { tftp://server/filename |
sftp://<user-name>:<pass-word>@server/filename | flash:
filename}{ tftp://server/filename |
sftp://<user-name>:<pass-word>@server/filename | flash: filename
| filename} |
Parameter Description |
•
tftp://server/filename
- Configures the TFTP
details to and from the file to be copied. ▪ server - IP address or host name of the TFTP server. ▪ filename - Name of the file to be copied or file to which information is to be copied. •
sftp://<user-name>:<pass-word>@server/filename
- Configures the SFTP
details to and from the file to be copied. ▪ user-name - User name of remote host or server. ▪ pass-word – Password for the corresponding user name of remote host or server. ▪ server - IP address or host name of the server. ▪ filename - Name of the file to be copied or file to which information is to be copied. • flash: filename - Configures the name of the file to be copied. This file is present in flash. • filename - Configures the name of the file to be copied. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Note: |
Filenames and directory names are case sensitive |
Example |
SEFOS# copy
tftp://12.0.0.2/clclirel flash:clcliser |
Related Commands |
• copy running startup-config - Copies variables from the running configuration to the startup configuration file in NVRAM. • copy
startup-config - Copies variables from the running
configuration to the startup configuration file in NVRAM. |
Command
Objective |
This command manages the system
clock. |
Syntax |
clock set hh:mm:ss <day (1-31)>
{january|february|march|april|may|june|july|august|september| october|november|december}
<year (2000 - 2035)> |
Parameter
Description |
• hh:mm:ss
- Sets the current time. The format is hour, minutes and seconds. ▪ <day (1-31)> - Sets the current day. This value ranges from 1 to 31. ▪ january - Sets the month as January. ▪ february - Sets the month as February. ▪ march - Sets the month as March. ▪ april - Sets the month as April. ▪ may - Sets the month as May. ▪ june - Sets the month as June. ▪ july - Sets the month as July. ▪ august - Sets the month as August. ▪ september - Sets the month as September. ▪ october - Sets the month as October. ▪ november - Sets the month as November. ▪ december - Sets the month as December. ▪ <year (2000 - 2035)> - Sets the year. This value ranges from 2000 to 2035. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup, Enterprise Metro, and
Metro_E |
Example |
SEFOS# clock set 18:04:10 18 Oct 2005 |
Related
Command(s) |
• show
clock - Displays the system clock. |
Command Objective |
This
command clears the contents of the startup configuration or sets parameters
in NVRAM to default values. |
Syntax |
erase {startup-config | nvram: |
flash:filename} |
Parameter Description |
•
startup-config -
Clears the startup
configuration file. •
nvram - Clears the content from NVRAM. • flash:filename - Clears the content from the local system flash file. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Note:
|
The Delete functionality is supported only for VxWorks and Linux. |
Example |
SEFOS# erase startup-config |
Related Command(s) |
• show nvram - Displays the current information stored in the NVRAM. • show system information- Displays system information. |
Command Objective |
This command enables the console CLI through a serial port. The no form of the command disables console CLI. |
Syntax |
cli console no cli console |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
Enabled |
Note:
|
This command takes effect only on system restart. |
Example |
SEFOS# cli
console |
Related Command(s) |
• show nvram - Displays the current information stored in the NVRAM. |
Command Objective |
This
command is used to set the send or receive flow-control value for an
interface. •
If
flowcontrol send is on for a device and if it detects any congestion at its
end, then it notifies the link partner or the remote device of the congestion
by sending a pause frame. •
If
flowcontrol receive is on for the remote device and it receives a pause
frame, then it stops sending any data packets. This prevents any loss of data
packets during the congestion period. •
PAUSE is a flow control mechanism that is
implied on full duplex Ethernet link segments. The mechanism uses MAC control
frames to carry the PAUSE commands. |
Note: |
Interface must first be brought administratively down
before setting flow control status |
Syntax |
flowcontrol { send | receive} { on
| off | desired} |
Parameter Description |
• send - Sets the interface to send flow control packets to a remote device. •
receive - Sets the interface to receive
flow control packets from a remote device. •
on - If used with receive, allows an interface to operate
with the attached device to send flow control packets. If used with send, the interface sends flowcontrol
packets to a remote device, if the device supports it. • off - Turns off the attached devices (when used with receive) or the local ports (when used with send) ability to send flow-control packets to an interface or to a remote device respectively. • desired - Allows a local port to operate with an attached device that is required to send flow control packets or that may send the control packets, when used with receive option. Allows the local port to send administrative status to a remote device if the remote device supports it, when used with send option. |
Mode |
Interface Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
The default
flow control for the interfaces are •
flowcontrol
receive on • flowcontrol send on |
Example |
SEFOS(config-if)#
flowcontrol send on |
Related Command(s) |
• show interfaces - Displays the interface status and configuration. • show flow-control - Displays the flowcontrol information. |
Command Objective |
This
command disables a physical interface, VLAN interface, port-channel interface,
tunnel interface, or OOB interface. The no
form of the command enables a physical interface, VLAN interface,
port-channel interface, tunnel interface, or OOB interface. |
Syntax |
shutdown no shutdown |
Mode |
Interface
Configuration Mode for physical interface, port-channel, tunnel interface, or
OOB Interface VLAN Interface Mode for VLAN interface |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
•
The
physical interface eth0 is enabled. •
The
interface VLAN 1 is enabled. • The port-channel interface is disabled. |
Note:
|
• All functions on the specified interface are disabled by the shutdown command. • If OOB interface is enabled, then the physical interface eth0 is disabled. • When the same network interface is used for OOB and NFS mounting, the operation done on OOB will have impact on NFS. For example, when interface eth0 is used for OOB and NFS mounting, executing shutdown command on the OOB interface will make the admin down and the NFS communication will be lost. |
Example |
SEFOS(config-if)#
shutdown |
Related Command(s) |
• show spanning-tree - Summary, Blockedports, Pathcost, Redundancy - Displays spanning tree-related information available in the switch for the current STP enabled in the switch. • show spanning-tree detail - Displays detailed spanning tree-related information of the switch and all ports enabled in the switch. • show spanning-tree active - Displays spanning tree-related information available in the switch for the current STP enabled in the switch. • show spanning-tree – layer 2 gateway port - Displays spanning tree information for all L2GPs enabled in the switch. • show spanning-tree mst - CIST or specified mst Instance - Displays multiple spanning tree information for all MSTIs in the switch. • show interfaces - Displays the interface status and configuration. • ppp serverip - Sets the Server IP address for the PPP Interface on PPP Client. |
Command Objective |
This
command sets the debug traces for the specified level and severity for all the interfaces. The no
form of the command resets the configured debug traces. |
Syntax |
debug interface [track] [enetpktdump] [ippktdump] [arppktdump]
[trcerror] [os] [failall] [buffer] [all][{ <short (0-7)> | alerts |
critical | debugging | emergencies | errors | informational | notification |
warnings }] no debug interface [track]
[enetpktdump] [ippktdump] [arppktdump] [trcerror] [os] [failall] [buffer]
[all] |
Parameter Description |
•
track - Generates debug messages for
all track messages. •
enetpktdump - Generates debug messages for
ethernet packet dump messages. •
ippktdump - Generates debug messages for
IP protocol-related packet dump messages. •
arppktdump - Generates debug messages for
address resolution protocol-related packet dump messages. •
trcerror - Generates debug messages for
trace error messages. • os - Generates debug messages for OS resources. For example, when there is a failure in mem pool creation or deletion, this trace level is used •
failall - Generates debug messages for all
failures, including packet validation. • buffer - Generates debug messages for buffer trace levels where packet buffer is used. That is, in cases where packet is enqueued. •
all - Generates debug messages for
all kinds of traces. •
<short (0-7)> - Generates
debug statements for the specified severity leve.This value ranges from 0 to
7. • alerts - Generates debug statements for alert messages. • critical - Generates debug statements for critical conditions. • debugging - Generates debug statements for debugging messages. • emergencies - Generates debug statements when system is unusable. • errors - Generates debug statements for error conditions. • informational - Generates debug statements for informational messages. • notification - Generates debug statements for normal but significant messages. •
warnings - Generates
debug statements for warning conditions. |
Mode |
Privilege EXEC mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# debug interface trcerror critical |
Related Command(s) |
• show debugging - Displays state of each debugging option. |
Command
Objective |
This command configures the debug
logging option in the system..The specifies whether the logging is to be done
at console, to a file (system buffer), or through flash. The no form of the command
displays debug logs in the console.
|
Syntax |
debug-logging { console | file | flash } [standby] no debug-logging [standby] |
Parameter
Description |
•
console - Specifies
that logging
is to be done at console. • file - Specifies that logging is to be done in the file (system buffer). • flash - Specifies that the traces are logged into a file. • standby - Configures the debug logging option for the standby system. |
Mode |
Global Configuration Mode |
Default |
console |
Package |
Workgroup, Enterprise Metro, and
Metro_E |
Example |
SEFOS(config)# debug-logging flash standby SEFOS(config)# debug-logging console |
Related
Command(s) |
• show debug-logging - Displays the debug logs stored in file. |
Command Objective |
This
command configures the debug logging display option in the system. The debug
logs can be later uploaded, based on the input. The
no form of the command displays debug logs in the console.. |
Note: |
This
command is obsolete from 7.2.0 release |
Syntax |
debug-logging
{ console | file | flash | flash:<flash_url> } no
debug-logging |
Parameter Description |
•
console -
Displays the debug logs in console. • file - Displays the debug logs in the memory. • flash:<flash_url> - Displays the debug logs in the file in the mentioned location. |
Mode |
Global Configuration Mode |
Default |
console |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS(config)# debug-logging console SEFOS(config)# debug-logging flash:/home/twg |
Related Command(s) |
• show debug-logging - Displays the debug logs stored in file. |
Command Objective |
This command enables or disables the incremental save feature. |
Syntax |
incremental-save { enable |
disable } |
Parameter Description |
• enable - Enables the incremental save feature. • disable - Disables the incremental save feature. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
enable |
Example |
SEFOS(config)#
incremental-save enable |
Related Command(s) |
•
show nvram - Displays the current
information stored in the NVRAM. |
Command Objective |
This command enables or disables the auto save trigger function. |
Syntax |
auto-save trigger { enable |
disable } |
Parameter Description |
• enable - Enables the auto save trigger function. • disable - Disables the auto save trigger function. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
disable |
Example |
SEFOS(config)#
auto-save trigger enable |
Related Command(s) |
•
show nvram - Displays the current
information stored in the NVRAM. |
Command Objective |
This command enables or disables the rollback function. |
Syntax |
rollback
{ enable | disable } |
Parameter Description |
• enable - Enables the rollback function. • disable - Disables the rollback function. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
enable |
Example |
SEFOS(config)# rollback enable |
Related Command(s) |
•
show nvram - Displays the current
information stored in the NVRAM. |
Command Objective |
This command shuts down all the ports in the corresponding modules and releases all the allocated memory. |
Note: |
• BGP, OSPF, ISIS, RSVPTE, LDP shutdown command implementations are applicable only for stack environment. • It is not applicable for solution environment, so shutdown command should not be used in HA scenarios |
Syntax |
shutdown
{ ospf | ospf3 | bgp | isis | rsvpte | ldp} |
Parameter Description |
• ospf - Shuts down the Open Shortest Path First (OSPF) module. • ospf3 - Shuts down the Open Shortest Path First version 3 (OSPFv3) module. • bgp - Shuts down the Border Gateway Protocol (BGP) module. • isis - Shuts down the Intermediate System to Intermediate system (ISIS) module. • rsvpte - Shuts down the Resource Reservation Protocol with Traffic Engineering (RSVPTE) module. • ldp - Shuts down the Label Distribution Protocol (LDP) module. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS(config)# shutdown ospf |
Related Command(s) |
•
start ospf |ospf3 |bgp |isis | rsvpte | ldp
- Starts the specified module. |
Command Objective |
This command starts and enables the corresponding modules and allocates the required resources to the corresponding module. |
Syntax |
start
{ ospf | ospf3 | bgp | isis | rsvpte | ldp } |
Parameter Description |
• ospf - Starts and enables the Open Shortest Path First (OSPF) module. • ospf3 - Starts and enables the Open Shortest Path First version 3 (OSPFv3) module. • bgp - Starts and enables the Border Gateway Protocol (BGP) module. • isis - Starts and enables the Intermediate System to Intermediate System (ISIS) module. • rsvpte - Starts and enables the Resource Reservation Protocol with Traffic Engineering (RSVPTE) module. • ldp - Starts and enables the Label Distribution Protocol (LDP) module. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS(config)# start ospf |
Related Command(s) |
•
shutdown ospf |ospf3
|bgp |isis
| rsvpte | ldp- Shutsdown the specified module. |
Command Objective |
This command sets the maximum
threshold values of RAM, CPU, and flash, of the switch. When the current
resource usage rises above the threshold limit, the SNMP trap message with
maximum severity will be sent for the specified resource and the syslog
message will be displayed. This threshold value is represented in percentage
and ranges between 1 and 100 percentage. |
Syntax |
set
switch maximum { RAM | CPU | flash } threshold <percentage (1-100)> |
Parameter Description |
• RAM - Indicates the maximum RAM usage of the switch in percentage. When the RAM usage crosses the threshold percentage, an SNMP trap with maximum severity will be sent to the manager. • CPU - Indicates the maximum CPU usage of the switch in percentage. When CPU load exceeds the threshold value, an SNMP trap with maximum severity will be sent to the manager. • flash - Indicates the maximum flash usage of the switch in percentage. When the flash usage crosses the threshold percentage, an SNMP trap with maximum severity will be sent to the manager. • percentage (1-100) - Configures the threshold value in percentage. This value ranges from 1 to 100 percentages. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
• RAM - 100% • CPU - 100 % • flash - 100% |
Example |
SEFOS(config)# set switch maximum RAM threshold 98 |
Related Command(s) |
•
show env -
Displays the switch-related information such as CPU, flash and RAM usage, and
also displays the current power and temperature of the switch. |
Command Objective |
This command sets the maximum
and minimum temperature threshold values of the switch in Celsius. When the
current temperature drops below the threshold, an SNMP trap with maximum
severity will be sent to the manager. This threshold value ranges between -14
and 40 degree Celsius. |
Note:
|
This command is a complete standardized implementation of the existing command set switch maximum - threshold. |
Syntax |
set
switch temperature {min|max} threshold <celsius (-14 - 40)>} |
Parameter Description |
• min - Sets the minimum temperature threshold value for the switch. When the current temperature drops below the threshold, an SNMP trap with maximum severity will be sent to the manager. • max - Sets the maximum temperature threshold value for the switch. When the current temperature rises above the threshold, an SNMP trap with maximum severity will be sent to the manager. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
• min - 10 degree Celsius • max - 40 degree Celsius |
Example |
SEFOS(config)# set switch temperature min threshold -10 SEFOS(config)# set switch temperature max threshold 37 |
Related Command(s) |
•
show env -
Displays the switch-related information such as CPU, flash and RAM usage, and
also displays the current power and temperature of the switch. |
Command Objective |
This command sets the maximum
and minimum threshold values of the switch power supply in Volts. When the
current temperature drops below the threshold, an SNMP trap with maximum
severity will be sent to the manager. This threshold value ranges between 100
and 230 Volts. |
Note:
|
This command is a complete standardized implementation of the existing command set switch temperature - threshold. |
Syntax |
set
switch power {min|max} threshold <volts (100-230)> |
Parameter Description |
• min - Sets the minimum threshold power supply for the switch. When the voltage drops below the threshold, an SNMP trap with maximum severity will be sent to the manager. • max - Sets the maximum threshold power supply for the switch. When the voltage rises above the threshold, an SNMP trap with maximum severity will be sent to the manager. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
• min - 100 Volts • max - 230 Volts |
Example |
SEFOS(config)# set switch power min threshold 110 SEFOS(config)# set switch power max threshold 220 |
Related Command(s) |
•
show env -
Displays the switch-related information such as CPU, flash and RAM usage, and
also displays the current power and temperature of the switch. |
Command Objective |
This command configures the maximum number of unicast dynamic MAC (L2) MAC entries the hardware can learn on the system, in a configured time interval. In the next subsequent time interval, the hardware can learn the number of previously learnt MAC entries along with present MAC entries. This cycle will continue until MAC learning reaches the maximum number of L2 unicast dynamic entries learning capacity of the system. If rate limit is changed while timer is running, new rate limit value takes effect on next timer restart. This limit controls the number of MAC entries indicated to control plane from hardware when hardware MAC learning is enabled. Configuration value '0' disables this feature in the system. The no form of the command removes the limit on number of unicast MAC entry indications (limit value is set as 0) and resets the configured time interval to default value. |
Syntax |
mac-learn-rate
{<no of MAC entries(0-2147483647)>} [interval
{<milliseconds(1-100000)>}] no
mac-learn-rate |
Parameter Description |
• <no of MAC entries(0-2147483647)> - Configures the maximum number of unicast dynamic MAC (L2) entries that can be learned in the switch within the specified time interval. The configured value takes effect on next timer restart, if this value is changed while the timer is running. This value is used to control the number of MAC entries indicated to control plane from the hardware, when hardware MAC learning is enabled. This value ranges from 0 to 2147483647. The value 0 represents that no limit is set in the switch. This limit value does not impose any restrictions on multicast or broadcast, and dynamic, static or protocol (MMRP) MAC learning capability limits. • interval<milliseconds(1-100000)> - Configures the time interval (in milliseconds) for maximum number of MAC entries to be learned in the switch. The configured value takes effect from the next timer restart. This value ranges from 1 to 100000 milliseconds. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
• <no of MAC entries(0-2147483647)> - 1000 • interval - 1000 |
Example |
SEFOS(config)# mac-learn-rate 100 interval 500 |
Related Command(s) |
• show mac-learn-rate - Displays the maximum limit on number of MAC learning indications to control plane from hardware and the MAC learning limit rate interval. |
Command Objective |
This
command sets the system contact information. |
Syntax |
system
contact <contact info> |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS(config)# system contact support@x.com |
Related Command(s) |
•
show
system information - Displays system information. |
Command Objective |
This
command sets the system location. |
Syntax |
system
location <location name> |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS(config)# system location Controls |
Related Command(s) |
•
show
system information - Displays system information. |
This command clears all the current interface counters from the interface unless the optional arguments type and number are specified to clear only a specific interface type (Serial, Ethernet, Token Ring, and so on). |
|
Syntax |
clear
interfaces [ <interface-type> <interface-id> ] counters |
Parameter Description |
• <interface-type> - Displays the IP interface configuration for the specified type of interface. The interface can be: ▪ fastethernet – Officially referred to as 100BASE-T standard. This is a version of LAN standard architecture that supports data transfer upto 100 Megabits per second. ▪ XL-ethernet – A version of LAN standard architecture that supports data transfer upto 40 Gigabits per second. ▪ extreme-ethernet – A version of Ethernet that supports data transfer upto 10 Gigabits per second. ▪ internal-lan – Internal LAN created on a bridge per IEEE 802.1ap. • <interface-id> - Displays the IP interface configuration for the specified interface identifier. This is a unique value that represents the specific interface. This value is a combination of slot number and port number separated by a slash, for interface type other than i-lan. For example: 0/1 represents that the slot number is 0 and port number is 1. Only i-lan ID is provided for interface type i-lan. For example: 1 represents i-lan ID. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# clear interfaces counters |
Related Command(s) |
• show interfaces - counters - Displays the interface statistics for each port. •
show interfaces
- Displays the interface status and configuration. |
Command Objective |
This command clears all the current interface counters from the interface unless the optional arguments type and number are specified to clear only a specific interface type (Serial, Ethernet, Token Ring, and so on). |
Note:
|
This command is a standardized implementation of the existing command and operates similar to that of the command clear interfaces - counters. |
Syntax |
clear
counters [ <interface-type> <interface-id> ] |
Parameter Description |
• <interface-type> - Clears the current counters for the specified type of interface. The interface can be: ▪ fastethernet – Officially referred to as 100BASE-T standard. This is a version of LAN standard architecture that supports data transfer upto 100 Megabits per second. ▪ XL-ethernet – A version of LAN standard architecture that supports data transfer upto 40 Gigabits per second. ▪ extreme-ethernet – A version of Ethernet that supports data transfer upto 10 Gigabits per second. ▪ internal-lan – Internal LAN created on a bridge per IEEE 802.1ap. •
<interface-id>
- Clears the current counters for the specified type of interface identifier.
This is a unique value that represents the specific interface. This value is
a combination of slot number and port number separated by a slash, for
interface type other than i-lan. For example: 0/1 represents that the slot
number is 0 and port number is 1. Only i-lan ID is provided for interface
type i-lan. For example: 1 represents i-lan ID. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# clear counters |
Related Command(s) |
• show interfaces counters - Displays the interface statistics for each port. •
show interfaces
- Displays the interface status and configuration. |
Command Objective |
This command displays the IP interface configuration. |
Syntax |
show ip interface [vrf
<vrf-name>] [{[Vlan
<vlan-id(1-4094)>] |
[<interface-type> <interface-id>] | [loopback
<loopback-id(0-100)>]}] [vlan-counters] |
Parameter Description |
• vrf<vrf-name> - Displays IP interface for the specified VRF instance. This value represents unique name of the VRF instance. This value is a string whose maximum size is 32. • Vlan<vlan-id(1-4094)> - Displays the IP interface configuration for the specified VLAN ID. This is a unique value that represents the specific VLAN created. This value ranges from 1 to 4094. • <interface-type> - Displays the IP interface configuration for the specified type of interface. The interface can be: ▪ fastethernet – Officially referred to as 100BASE-T standard. This is a version of LAN standard architecture that supports data transfer upto 100 Megabits per second. ▪ XL-ethernet – A version of LAN standard architecture that supports data transfer upto 40 Gigabits per second. ▪ extreme-ethernet – A version of Ethernet that supports data transfer upto 10 Gigabits per second. ▪ internal-lan – Internal LAN created on a bridge per IEEE 802.1ap. • <interface-id> - Displays the IP interface configuration for the specified interface identifier. This is a unique value that represents the specific interface. This value is a combination of slot number and port number separated by a slash, for interface type other than i-lan. For example: 0/1 represents that the slot number is 0 and port number is 1. Only i-lan ID is provided for interface type i-lan. For example: 1 represents i-lan ID. • loopback<loopback-id(0-100)> - Displays the IP interface configuration for the specified loopback ID. This is a unique value that represents the specific loopback created. This value ranges from 0 to 100. • vlan-counters - Displays the VLAN traffic statistics for all interfaces (for which the member port details are configured) available in the switch or all contexts. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
vrf - default |
Note:
|
If executed without the optional parameters this command displays the IP interface statistics and configuration for all the available interfaces. |
Example |
SEFOS# show ip interface vrf default vlan1 is up, line protocol is down Internet Address is 12.0.0.6/8 Broadcast Address 12.255.255.255 Vlan counters disabled Ex0/1 is down, line protocol is down Internet Address is 0.0.0.0/0 Broadcast Address 255.255.255.255 Vlan counters enabled |
Related Command(s) |
• ip address - Sets the IP address for an interface. • switchport - Configures the port as switch port. • release - Releases the DHCP lease obtained for an IP address from a DHCP server, on the specified interface. • renew - Renews the DHCP lease for the interface specified. •
show interfaces
- Displays the interface status and configuration •
counters - Enables
or disables the statistics collection status for a VLAN interface. •
ip
unnumbered - vlan
- Configures the associated source interface for the unnumbered
interface. •
ppp serverip - Sets the Server IP address for the PPP
Interface on PPP Client. |
Command Objective |
This
command displays the configured authorized managers' related information
available in the switch. |
Syntax |
show authorized-managers
[ip-source < ip-address >] |
Parameter Description |
• ip-source< ip-address > - Displays the configured authorized manager-related information for the specified network or host address. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show
authorized-managers Ip Authorized Manager Table --------------------------- Ip Address :
12.0.0.1 Ip Mask :
255.255.255.255 Services allowed : ALL Ports allowed : Ex0/1 On cpu0 :
Deny Vlans allowed :
All Available Vlans |
Related Command(s) |
•
authorized-manager
ip-source -
Configures an IP authorized manager. |
Command Objective |
This command displays the interface status and configuration. |
Syntax |
show interfaces [{
[<interface-type> <interface-id>] [{ description | storm-control
| flowcontrol | capabilities | status | port-security-state | rate-limit }] |
{vlan <vlan-id/vfi-id> } | tunnel <tunnel-id (0-128)> |
private-vlan mapping | ppp <ppp-id(1-128)> [config] }] |
Parameter Description |
• <interface-type> - Displays the interface status and configuration for the specified type of interface. The interface can be: ▪ fastethernet – Officially referred to as 100BASE-T standard. This is a version of LAN standard architecture that supports data transfer upto 100 Megabits per second. ▪ XL-ethernet – A version of LAN standard architecture that supports data transfer upto 40 Gigabits per second. ▪ extreme-ethernet – A version of Ethernet that supports data transfer upto 10 Gigabits per second. ▪ i-lan – Internal LAN created on a bridge per IEEE 802.1ap. •
<interface-id>
- Displays the interface
status and configuration for the specified interface identifier. This
is a unique value that represents the specific interface. This value is a
combination of slot number and port number separated by a slash. For example:
0/1 represents that the slot number is 0 and port number is 1. description - Displays the admin status and
protocol status for the specified interface. •
description
- Displays
the interface description. •
storm-control - Displays the broadcast,
multicast, and unicast storm control suppression levels for the specified
interface. •
flowcontrol - Displays the flow control-related
statistics for the specified interface. •
capabilities - Displays the interface type,
interface speed, duplex operation, and flowcontrol status for the specified
interface. •
status - Displays the status, duplex
details, speed, and negotiation mode of the specified interface. •
port-security-state
- Displays the state of the
port security option. •
rate-limit -
Displays the rate limit burst size and rate-limit value of the interface. • vlan <vlan-id/vfi-id>- Displays the interface status and configuration for the specified VLAN/ VFI ID. This value ranges from 1 to 65535. ▪ <vlan –id> - VLAN ID is a unique value that represents the specific VLAN. This value ranges from 1 to 4094 ▪ <vfi-id>. - VFI ID is a VLAN created in the system which contains pseudowires and attachment circuits as member ports . This creates a logical LAN for the VPLS service. This value ranges from 4096 to 65535 Note: The VLAN ID 4095 is reserved and may be used to indicate a wildcard match for the VID in management operations or filtering database entries. Note: VFI IDs 4096 and 4097 are reserved identifiers used in MPLS PW. Note: The theoretical maximum for the maximum number of VFI is 65535 but the actual number of VFI supported is a sizing constant. Based on this, the maximum number of VFI ID accepted in the management interface is restricted. For example if 100 VFIs are supported, the maximum number of VFI supported will be restricted to hundred added to the maximum number of VLANs. An error message is displayed for any value beyond this range. •
tunnel<tunnel-id
(0-128)> - Displays the interface status and configuration for the specified
tunnel ID. This is a unique value that represents the specific tunnel created. This value ranges from 0 to 128. • private-vlan mapping - Displays list of secondary VLAN to the primary VLAN IVR interface, so that both VLANs share the same primary VLAN. •
ppp <ppp-id(1-128)
- Displays configurations
of the point to point protocol interface. This value ranges from 1 to 128. ▪ config - Displays all the details specific to inteface index. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show interfaces extreme-ethernet 0/1 Ex0/1 up, line protocol is up (connected) Bridge Port Type: Customer Bridge Port Interface SubType: extreme-ethernet Interface Alias: interface1 Hardware Address is 00:03:02:03:04:01 MTU 200 bytes, Error in Duplex status 100 Mbps, Auto-Negotiation HOL Block Prevention disabled. CPU Controlled Learning disabled. Auto-MDIX on Link Up/Down Trap is enabled Reception Counters Octets : 0 Unicast Packets : 0 Multicast Packets : 0 Broadcast Packets : 0 Discarded Packets : 0 Error Packets : 0 Unknown Protocol : 0 Transmission Counters Octets : 158406 Unicast Packets : 0 Multicast Packets : 1702 Broadcast Packets : 0 Discarded Packets : 0 Error Packets : 0 SEFOS# show interfaces description Interface Status Protocol Description --------- ------ -------- ----------- Ex0/1 up up Ex0/2 up up Ex0/3 down down Interface1 Ex0/4 up up Ex0/5 up up Ex0/7 down down po2 up down vlan1 up up vlan3 down down vlan2 down down tunnel0 down down tunnel1 down down internal-lan1down down virtual1 up up SEFOS# show interfaces extreme-ethernet 0/1 storm-control Ex0/1 DLF
Storm Control : Disabled DLF
Storm Control Limit : 0 Broadcast
Storm Control : Enabled Broadcast
Storm Control : 0 Multicast
Storm Control : Enabled Multicast
Storm Control : 0 SEFOS# show interfaces extreme-ethernet 0/1 flow-control Port Admin Oper Tx Pause Rx Pause HC TxPause HC RxPause Tx Rx Tx Rx ---- ------- ------- -------- -------- ---------- ---------- Ex0/2 on on off off 0 0 0 0 SEFOS# show interfaces extreme-ethernet 0/2 capabilities Ex0/2 Type : 10/100/1000 Base TX Speed : 10, 100, 1000, Auto Duplex : Half, Full FlowControl : Send, Receive SEFOS# show interfaces vlan 1 vlan1 up, line protocol is up (connected) Interface SubType: Not Applicable Interface Alias: vlan1 SEFOS# show interfaces port-channel 2 po2 up, line protocol is down (not connect) Bridge Port Type: Invalid Bridge Port Interface SubType: Not Applicable Interface Alias: po2 Hardware Address is 00:03:02:03:04:41 SEFOS# show interfaces tunnel 0 tunnel0 down, line protocol is down (not connect) Interface SubType: Not Applicable Hardware is Tunnel MTU 1480 bytes Encapsulation TUNNEL Tunnel Source 20.0.0.1,Destination 0.0.0.0 Tunnel for Openflow Hybrid Checksumming of packets Disabled Path MTU Discovery Disabled SEFOS# show interfaces rate-limit Ex0/1 Port Control Rate Limit : 0 kbps Port Control Burst Size : 0 kbits Ex0/2 Port Control Rate Limit : 0 kbps Port Control Burst Size : 0 kbits Ex0/3 Port Control Rate Limit : 0 kbps Port Control Burst Size : 0 kbits Ex0/4 Port Control Rate Limit : 0 kbps Port Control Burst Size : 0 kbits Ex0/5 Port Control Rate Limit : 0 kbps Port Control Burst Size : 0 kbits Ex0/7 Port Control Rate Limit : 0 kbps Port Control Burst Size : 0 kbits po2 Port Control Rate Limit : 0 kbps Port Control Burst Size : 0 kbits SEFOS# show interfaces port-security-state Interface Port-Security-State --------- ------------------- Ex0/1 Trusted Ex0/2 Trusted Ex0/3 Trusted Ex0/5 Untrusted SEFOS# show interfaces Ex0/1 up, line protocol is up (connected) Bridge Port Type: Customer Bridge Port Interface SubType: extreme-ethernet Interface Alias: Slot0/1 Hardware Address is 00:04:02:03:04:01 MTU 1500 bytes, Error in Duplex status 100 Mbps, Auto-Negotiation HOL Block Prevention disabled. CPU Controlled Learning disabled. Auto-MDIX on Link Up/Down Trap is enabled Reception Counters Octets : 888896 Unicast Packets : 8044 Multicast Packets : 446 Broadcast Packets : 3 Discarded Packets : 4021 Error Packets : 0 Unknown Protocol : 0 Transmission Counters Octets : 117795 Unicast Packets : 0 Multicast Packets : 1426 Broadcast Packets : 0 Discarded Packets : 0 Error Packets : 0 Ex0/2 up, line protocol is up (connected) Interface SubType: extreme-ethernet Interface Alias: Slot0/2 Hardware Address is 00:04:02:03:04:01 MTU 1500 bytes, Link Up/Down Trap is enabled Reception Counters Octets : 0 Unicast Packets : 0 Multicast Packets : 0 Broadcast Packets : 0 Discarded Packets : 0 Error Packets : 0 Unknown Protocol : 0 Transmission Counters Octets : 0 Unicast Packets : 0 Multicast Packets : 0 Broadcast Packets : 1 Discarded Packets : 1 Error Packets : 0 vlan1 up, line protocol is up (connected) Interface SubType: Not Applicable Interface Alias: vlan1 ppp1 down, line protocol is down Interface SubType: HDLC LCP Down serial1/1 up, line protocol is up (connected) Interface SubType: Not Applicable Encapsulation PPP, virtual-link ppp1 |
Related Command(s) |
• interface-configuration and deletion - Configures interface such as out-of-band management, port channel, tunnel and so on • snmp trap link-status - Enables trap generation on the interface. • storm-control - Sets storm control rate for broadcast, multicast, and DLF packets. • flowcontrol - Enables flow-control. • show flow-control - Displays the flow-control information. • mac-addr - Configures MAC address for the interface. • tunnelmode - Configures the tunnel interface with the associated parameters. • tunnel checksum - Enables end-to-end checksumming of packets. • tunnel path-mtu-discovery - Enables Path MTU discovery on tunnel. • tunnel udlr - Associates tunnel with a unidirectional interface. •
shutdown –
physical/VLAN/port-channel/tunnel interface - Disables a
physical interface, VLAN interface, port-channel interface, tunnel interface,
or OOB interface. •
rate-limit - Enables
the pause ingress rate limit above which PAUSE frames are transmitted on the
interface. • alias - For interface - Configures the alias name for the interface. The name is a string of maximum size 63. • set backplane interface - Configures an interface as backplane interface in the system. •
port-security-state - Configures the port
security state of the interface. •
channel-group - Sets the channel group
for the HDLC interface. •
controller - Configures a HDLC
controller and enters into Controller Configuration mode. •
snmp trap link-status
- Enables or disables trap generation on the interface. •
layer - Configures a virtual PPP link to a
physical interface. |
Command objectives |
This command displays the interface statistics for each port. |
Syntax |
show interfaces {counters |
HC-counters} [{ ppp <ppp-id(1-4094)> | <interface-type>
<interface-id> | vlan <vlan_vfi_id> | tunnel
<tunnel-id(0-128)>}] |
Parameter Description |
• counters - Displays the interface statistics for all the available interfaces. • HC-counters - Displays the interface incoming and outgoing traffic statistics for the HC port. • ppp<short(1-4094)> - Displays the counters for the interfaces of the point to point protocol. This value ranges from 1 to 4094. • <interface-type> - Displays the interface incoming and outgoing traffic statistics for the specified type of interface. The interface can be: ▪ fastethernet – Officially referred to as 100BASE-T standard. This is a version of LAN standard architecture that supports data transfer upto 100 Megabits per second. ▪ XL-ethernet – A version of LAN standard architecture that supports data transfer upto 40 Gigabits per second. ▪ extreme-ethernet – A version of Ethernet that supports data transfer upto 10 Gigabits per second. ▪ internal-lan – Internal LAN created on a bridge per IEEE 802.1ap. ▪ port-channel – Logical interface that represents an aggregator which contains several ports aggregated together. • <interface-id> - Displays the counters for the interface incoming and outgoing traffic statistics for the specified interface identifier. This is a unique value that represents the specific interface. This value is a combination of slot number and port number separated by a slash, for interface type other than internal-lan and port-channel. For example: 0/1 represents that the slot number is 0 and port number is 1. Only internal-lan or port-channel ID is provided, for interface types internal-lan and port-channel. For example: 1 represents internal-lan and port-channel ID. • vlan <vlan_vfi_id> - Displays the interface statistics for the specified VLAN/ VFI ID. This value ranges from 1 to 65535. ▪ <vlan –id> - VLAN ID is a unique value that represents the specific VLAN. This value ranges from 1 to 4094. ▪ <vfi-id>. - VFI ID is a VLAN created in the system which contains pseudowires and attachment circuits as member ports . This creates a logical LAN for the VPLS service. This value ranges from 4096 to 65535. Note: The VLAN ID 4095 is reserved and may be used to indicate a wildcard match for the VID in management operations or filtering database entries. Note: VFI IDs 4096 and 4097 are reserved identifiers used in MPLS PW. Note: The theoretical maximum for the maximum number of VFI is 65535 but the actual number of VFI supported is a sizing constant. Based on this, the maximum number of VFI ID accepted in the management interface is restricted. For example if 100 VFIs are supported, the maximum number of VFI supported will be restricted to hundred added to the maximum number of VLANs. An error message is displayed for any value beyond this range. • tunnel<tunnel-id(0-128)> - Displays the counters for the interface incoming and outgoing traffic statistics for the tunnel identifier. This is a unique value that represents the specific tunnel created. This value ranges from 0 to 128. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show interfaces counters Port InOctet InUcast InMcast InBcast InDiscard InErrs InHCOctet ---- ------- ------- ------- ------- --------- ------ --------- Ex0/1 41285879 191399 31496 138 191269 0 41285879 Ex0/2 0 0 0 0 0 0 0 vlan1 7341060 54994 0 0 0 0 7341060 Port OutOctet OutUcast OutMcast OutBcast OutDiscard OutErrs OutHCOctet ---- -------- -------- -------- -------- ---------- ------- ---------- Ex0/1 2309555 0 26615 0 0 0 2309555 Ex0/2 655 0 6 0 0 0 655 vlan1 14708005 55134 0 56 0 0 14708005 SEFOS# show interfaces counters vlan 1 Port InOctet InUcast InMcast InBcast InDiscard InErrs InHCOctet ---- ------- ------- ------- ------- --------- ------ --------- vlan1 7415163 55536 0 0 0 0 7415163 Port OutOctet OutUcast OutMcast OutBcast OutDiscard OutErrs OutHCOctet ---- -------- -------- -------- -------- ---------- ------- ---------- vlan1 14788627 55672 0 56 0 0 14788627 SEFOS # show interfaces HC-counters Port InHCOctet InUcastPkts InMulticastPkts ---- --------- ----------- -------------- Ex0/1 594011 0 0 Ex0/2 0 0 0 vlan1 0 0 0 Port OutHCOctet OutUcastPkts OutMulticastPkts ---- ---------- ------------ --------------- Ex0/1 18027 0 0 Ex0/2 11275 0 0 vlan1 120 0 0 SEFOS# show interfaces HC-counters extreme-ethernet 0/1 Port InHCOctet InUcastPkts InMulticastPkts ---- --------- ----------- -------------- Ex0/1 153868 0 0 Port OutHCOctet OutUcastPkts OutMulticastPkts ---- ---------- ------------ --------------- Ex0/1 16730 0 0 SEFOS # show interfaces HC-counters tunnel 0 Port InHCOctet InUcastPkts InMulticastPkts ---- --------- ----------- -------------- tunnel0 0 0 0 Port OutHCOctet OutUcastPkts OutMulticastPkts ---- ---------- ------------ --------------- tunnel0 0 0 0 |
Related Command(s) |
• interface - Configure interface such as out-of-band management, port channel, tunnel and so on. |
Command Objective |
This
command displays the system-specific index configuration for all interfaces
for which this configuration is done. |
Syntax |
show
system-specific port-id |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show system-specific port-id Interface PortID -------- -------- Slot0/1 45 |
Related Command(s) |
•
system-specific
port-id - Configures the system-specific
index for the port. |
Command Objective |
This
command displays the custom-param configurations done in the switch. |
Syntax |
show
custom-param |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show custom-param Slot0/1 AttrID
AttrValue --------
-------- 4 5454 Slot0/2 AttrID
AttrValue --------
-------- 2 2424 Type Length Value -------- -------- -------- 2 4 root 5 4 root |
Related Command(s) |
•
set custom-param - Configures the
custom-param for a particular port. |
Command Objective |
This command shows the Maximum Transmission Unit (MTU) of ports in the switch. |
Syntax |
show interfaces mtu [{ Vlan
<vlan-id/vfi-id> [switch <switch-name>] | port-channel
<port-channel-id (1-65535)> | <interface-type> <interface-id>
}] |
Parameter Description |
• Vlan <vlan-id/vfi-id> - Displays the MTU value for the specified VLAN/ VFI ID. This value ranges from 1 to 65535. ▪ <vlan –id> - VLAN ID is a unique value that represents the specific VLAN. This value ranges from 1 to 4094. ▪ <vfi-id> - VFI ID is a VLAN created in the system which contains pseudowires and attachment circuits as member ports . This creates a logical LAN for the VPLS service. This value ranges from 4096 to 65535. Note: The VLAN ID 4095 is reserved and may be used to indicate a wildcard match for the VID in management operations or filtering database entries. Note: VFI IDs 4096 and 4097 are reserved identifiers used in MPLS PW. Note: The theoretical maximum for the maximum number of VFI is 65535 but the actual number of VFI supported is a sizing constant. Based on this, the maximum number of VFI ID accepted in the management interface is restricted. For example if 100 VFIs are supported, the maximum number of VFI supported will be restricted to hundred added to the maximum number of VLANs. An error message is displayed for any value beyond this range. • switch <switch-name> - Configures IP interface for the specified context. This value represents unique name of the switch context. This value is a string whose maximum size is 32. This parameter is specific to multiple instance feature. This feature has been included to adhere to the Industry Standard CLI syntax. • port-channel<port-channel-id (1-65535)> - Displays the MTU value for the specified port-channel ID. This is a unique value that represents the specific port-channel created. This value ranges from 1 to 65535. • <interface-type> - Displays the MTU value for the specified type of interface. The interface can be: ▪ fastethernet – Officially referred to as 100BASE-T standard. This is a version of LAN standard architecture that supports data transfer upto 100 Megabits per second. ▪ XL-ethernet – A version of LAN standard architecture that supports data transfer upto 40 Gigabits per second. ▪ extreme-ethernet – A version of Ethernet that supports data transfer upto 10 Gigabits per second. ▪ internal-lan – Internal LAN created on a bridge per IEEE 802.1ap. • <interface-id> - Displays the MTU value for the specified interface identifier. This is a unique value that represents the specific interface.This value is a combination of slot number and port number separated by a slash, for interface type other than i-lan.For example: 0/1 represents that the slot number is 0 and port number is 1. Only i-lan ID is provided for interface type i-lan. For example: 1 represents i-lan ID. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show interface mtu vlan 1 vlan1
MTU size is 1500 |
Related Command(s) |
•
mtu- Configures the Maximum
Transmission Unit frame size for the interface. |
Command Objective |
This
command displays the current information stored in the NVRAM. |
Syntax |
show
nvram |
Mode |
Privileged
EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show nvram Default IP Address : 20.0.0.1 Default Subnet Mask : 255.0.0.0 Default IP Address Config Mode : Dynamic Default IP Address Allocation Protocol : BOOTP Switch Base MAC Address : 00:89:fe:34:55:33 Default Interface Name : Ex0/1 Default RM Interface Name : int1 Config Restore Option : No restore Config Save Option : No save Auto Save : Enable Incremental Save : Enable Roll Back : Enable Config Save IP Address : 0.0.0.0 Config Save Filename : switch.conf Config Restore Filename : /home/automation/code/future/LR/switch1/restore.conf PIM Mode : Sparse Mode IGS Forwarding Mode : MAC based Cli Serial Console : Yes SNMP EngineID : 80.00.08.1c.04.46.53 SNMP Engine Boots : 42 Default VLAN Identifier : 1 Stack PortCount : 0 ColdStandby : Disable Store Default Value : Disable Vrf Unique Mac : Enable Hitless Restart Flag : Disable Hardware Version : 5.9.1 Firmware Version : 6.7.2 Hardware Part Number : 1-0-0 Software Serial Number : 1-0-0 Software Version : 7.2.0 Switch Name : default RM Heart Beat Mode : Internal RM Redundancy Type : Cold RM Data Plane Type : Shared RM Type : OOB NPAPI mode : Synchronous TimeStamp Method : Software Restore Flag : Enabled Dynamic Port Count : 24 FIPS operation mode : Disabled Restore Option : Disabled Bridge Mode : Customer Bridge Debugging Log File Location : /home/twg Management Port : Disabled Automatic Port Create Flag : Disabled IMG_DUMP_PATH : /home/twg/ |
Related Command(s) |
• default mode - Configures the mode by which the default interface acquires its IP address. • default restore-file - Configures the default restoration file. • default ip address - Configures the IP address and subnet mask for the default interface. • ip address - Sets the IP address for an interface. • base-mac - Configures the base MAC address for the switch in the NVRAM. • login authentication - Sets the authentication method for user logins. • write - Writes the running-config to a file in flash, startup-configuration file, or to a remote site. • erase- Clears the contents of the startup configuration or sets parameters in NVRAM to default values. • default vlan id - Sets default VLAN Identifier in NVRAM to be used at reboot of the switch. • default ip address allocation protocol - Configures the protocol by which the default interface acquires its IP address. • incremental-save - Enables or disables the incremental save feature. • auto-save trigger - Enables or disables the auto save trigger function. • rollback - Enables or disables the rollback function. • cli console - Enables the console CLI through a serial port. • automatic-port-create - Enables or disables the Automatic Port Create feature. • default rm-interface-type - Configures the type of interface used for RM communication. • default rm-interface - Specifies the name of the default RM interface that can be used for communication between the Active and Standby nodes. • default value save - Enables or disables the default value save option. • set redundancy heart-beat - Sets the method for redundancy manager election.The method can be either internal logic or external logic. • set redundancy-type - Sets the type of redundancy model for redundancy manager. • set redundancy hardware-type - Sets the type of dataplane or hardware. |
Command Objective |
This command displays the status of the all the resources like CPU, flash and RAM usage, and also displays the current, power, and temperature of the switch. This command is a complete standardized implementation of the existing command. |
Syntax |
show env {all | temperature | fan
| RAM | CPU | flash | power} |
Parameter Description |
• all - Displays threshold information of all resources such as CPU, Flash, RAM, power, and temperature. • temperature - Displays temperature threshold values of the switch in Celcius. • fan - Displays the threshold information of the fan. • RAM - Displays the maximum RAM usage of the switch in percentage. • CPU - Displays the maximum CPU usage of the switch in percentage. • flash - Displays the maximum flash usage of the switch in percentage. • power - Displays the threshold power supply for the switch. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show env all RAM Threshold : 98% Current RAM Usage : 81% CPU Threshold : 100% Current CPU Usage : 2% Fan Status 1 : Operational Fan Status 2 : Operational Fan Status 3 : Operational Fan Status 4 : Operational Fan Status 5 : Operational Min power supply : 110v Max power supply : 220v Current power supply : 230v Max Temperature : 37C Min Temperature : -10C Current Temperature : 40C Flash Threshold : 100% Current Flash Usage : 66% Mgmt Port Routing : Disabled SEFOS# show env RAM RAM Threshold : 98% Current RAM Threshold : 97% SEFOS# show env power Min power supply : 110v Max power supply : 220v Current power supply : 230v |
Related Command(s) |
• set switch maximum - threshold - Sets the switch maximum threshold values of RAM, CPU, and flash. • set switch temperature - threshold - Sets the maximum and minimum temperature threshold values of the switch. • set switch power - threshold - Sets the maximum and minimum threshold values of the switch power supply. |
Command Objective |
This
command displays system information. |
Syntax |
show system information |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show
system information Hardware
Version : 5.9.1 Firmware
Version : 6.7.2 Hardware
Part Number : 1-0-0 Software
Serial Number : 1-0-0 Software
Version : 6.12.6 Switch
Name : Oracle ES2-72 System
Contact : System
Location : Logging
Option : Console
Logging Login
Authentication Mode : Local Config
Save Status : Not
Initiated Remote
Save Status : Not
Initiated Config
Restore Status : Not
Initiated Traffic
Separation Control : none |
Related Command(s) |
• login authentication - Sets the authentication method for user logins. • system contact - Sets the system contact information. • system location - Sets the system location. • debug-logging - Configures the displays of debug logs. • config-restore - Configures the startup configuration restore option. • set switch-name - Sets the name of the switch. •
Traffic seperation control - Configures the method for
receiving control packets to CPU. |
Command Objective |
This command displays the flow-control information. |
Syntax |
show flow-control [ interface
<interface-type> <interface-id>] |
Parameter Description |
• <interface-type> - Displays the flow-control information for the specified type of interface. The interface can be: ▪ fastethernet – Officially referred to as 100BASE-T standard. This is a version of LAN standard architecture that supports data transfer upto 100 Megabits per second. ▪ XL-ethernet – A version of LAN standard architecture that supports data transfer upto 40 Gigabits per second. ▪ extreme-ethernet – A version of Ethernet that supports data transfer upto 10 Gigabits per second. ▪ i-lan – Internal LAN created on a bridge per IEEE 802.1ap. • <interface-id> - Displays the flow-control information for the specified interface identifier. This is a unique value that represents the specific interface. This value is a combination of slot number and port number separated by a slash, for interface type other than i-lan. For example: 0/1 represents that the slot number is 0 and port number is 1. Only i-lan ID is provided for interface type i-lan. For example: 1 represents i-lan ID. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Note:
|
If this
command is executed without the optional parameter it displays the
flowcontrol information of the Oracle SEFOS router. Otherwise it displays the
flowcontrol information of the specified interface. |
Example |
SEFOS# show flow-control interface extreme-ethernet 0/1 Port Admin Oper Tx Pause Rx Pause HC TxPause HC RxPause Tx Rx Tx Rx ---- ------- ------- -------- -------- ---------- ---------- Ex0/1
on on off off
0 0 0 0 |
Related Command(s) |
• show interfaces - Displays interface status and configuration. •
flowcontrol -
Enables flowcontrol on an interface. |
Command
Objective |
This command displays the debug
logs stored in file. |
Syntax |
show debug-logging [standby] |
Mode |
Privileged EXEC Mode |
Package |
Workgroup, Enterprise Metro, and
Metro_E |
Example |
SEFOS# show debug-logging standby Creating log file fsir.log.4693 |
Related
Command(s) |
• debug-logging - standby - Configures the standby debug logging display option in the system. • debug-logging flash url - Sets the debugging logging option as Flash URL (Uniform Resource Locator). The debug traces or logs will be stored in that path. |
Command Objective |
This
command displays state of each debugging option. |
Syntax |
show debugging |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show
debugging Spanning Tree : Spanning tree
timers related debugging is on |
Related Command(s) |
• debug spanning-tree - Provides spanning tree debugging support. • debug dot1x - Enables debugging of dot1x module. • debug radius - Enables RADIUS debugging options. • debug ip igmp snooping- Specifies the debug levels for the IGMP snooping module. • debug ssh - Sets the given trace levels for SSH. • debug ssl - Sets the given debug levels for SSL. • debug vlan - Enables the tracing of the VLAN submodule as per the configured debug levels. • debug garp - Enables the tracing of the GARP submodule as per the configured debug levels. • debug ip dhcp client - Enables the tracking of the DHCP client operations as per the configured debug levels. • debug ip dhcp relay - Enables the debug level for tracing the DHCP Relay Module • debug ip dhcp server - Enables the tracking of the DHCP server operations as per the configured debug levels. •
debug ethernet-oam
– Enables or displays the debug level for the EOAM Module. |
Command Objective |
This
command displays the system date and time. |
Syntax |
show clock |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show
clock Wed Oct 08 17:15:17 2014 (UTC +00:00) |
Related Command(s) |
•
clock set - Manages the system clock. |
Command Objective |
This command displays the configuration information currently running on the router, the configuration for a specific interface, or map class information and this configuration is lost if the system is restarted The command is useful when there are multiple interfaces and you want to look at the configuration of a specific interface. |
Syntax |
show running-config [{ syslog | dhcp | dhcp6 |dvmrp | stp
[ switch <context_name> ] | ecfm [switch <context_name>] | la |
pnac | igs | mlds | vlan <vlan-id/vfi-id> [ switch <context_name>
] | interface { <interfacetype> <interfacenum> | vlan
<vlan-id/vfi-id> } |ospf | isis | rip | bgp | ipv6 | rip6 | ssh | ssl |
acl | ip | pim | pimv6 | vrrp | snmp | radius | rmon | rm | mbsm | ospf3 |
mpls | igmp | eoam | fm | igmp-proxy | elmi | route-map | tacacs | tac | sntp
| switch <context_name> | nat | elps | erps | [switch
<context_name>] | entity-mib | http | poe | pbb [switch
<context_name>] |cn [switch <context_name>] | dcbx | ptp |clkiwf
| mld | msdp | msdpv6 | lldp | firewall | system | ospfte | ipsourceguard |
tlm | rbridge | l2dhcsnp | mef | network-clock | vrf <vrf-name> | hs |
bfd | rsna [<rsna-id>] | ppp | qosxtd | qos | dsmon | mrp | ofcl | wss |
vpn |ipsecv6 |esat | vxlan | wssuser}] |
Parameter Description |
•
syslog - Displays the configuration done
in the syslog module. •
dhcp - Displays the configuration done
in the DHCP module. •
dvmrp - Displays the configuration done
in the DVMRP module. •
stp - Displays the configuration done
in the STP module. ▪ switch <context_name> - Displays the configuration done in the context for the specified module. This value represents unique name of the switch context. This value is a string of maximum size 32. This parameter is specific to multiple instance feature. •
ecfm - Displays the configuration done
in the ECFM module. •
la - Displays the configuration done
in the LA module. •
pnac - Displays the configuration done
in the PNAC module. •
igs - Displays the configuration done
in the IGS module. •
mlds - Displays the configuration done
in the MLDS module. • vlan <vlan-id/vfi-id> - Displays the configuration done for the specified VLAN / VFI ID. This is a unique value that represents the specific VLAN/ VFI created or to be created. This value ranges from 1 to 65535. ▪ <vlan –id> - VLAN ID is a unique value that represents the specific VLAN. This value ranges from 1 to 4094. ▪ <vfi-id>. - VFI ID is a VLAN created in the system which contains pseudowires and attachment circuits as member ports . This creates a logical LAN for the VPLS service. This value ranges from 4096 to 65535 Note: The VLAN ID 4095 is reserved and may be used to indicate a wildcard match for the VID in management operations or filtering database entries. Note: VFI IDs 4096 and 4097 are reserved identifiers used in MPLS PW. Note: The theoretical maximum for the maximum number of VFI is 65535 but the actual number of VFI supported is a sizing constant. Based on this, the maximum number of VFI ID accepted in the management interface is restricted. For example if 100 VFIs are supported, the maximum number of VFI supported will be restricted to hundred added to the maximum number of VLANs. An error message is displayed for any value beyond this range. ▪ switch
<context_name> - Displays the configuration done in the context for the specified
module. This value represents unique name of the switch context. This
value is a string of maximum size 32. This parameter is specific to multiple
instance feature. •
interface - Displays
the configuration done for the specified type of interface ▪ <interfacetype> - Displays the configuration done for the specified type of interface. The interface can be: • fastethernet – Officially referred to as 100BASE-T standard. This is a version of LAN standard architecture that supports data transfer upto 100 Megabits per second. • XL-ethernet – A version of LAN standard architecture that supports data transfer upto 40 Gigabits per second. • extreme-ethernet – A version of Ethernet that supports data transfer upto 10 Gigabits per second. • i-lan
– Internal LAN created on a bridge per IEEE 802.1ap. • port-channel – Logical interface that represents an aggregator which contains several ports aggregated together. ▪ <interface-id> - Displays the configuration done for the specified interface identifier. This is a unique value that represents the specific interface. This value is a combination of slot number and port number separated by a slash, for interface type other than i-lan and port-channel. For example: 0/1 represents that the slot number is 0 and port number is 1. Only i-lan or port-channel ID is provided, for interface types i-lan and port-channel. For example: 1 represents i-lan and port-channel ID. ▪ vlan <vlan-id/vfi-id> - Displays the configuration done for the specified VLAN / VFI ID. This is a unique value that represents the specific VLAN/ VFI created or to be created. This value ranges from 1 to 65535. • <vlan –id> - VLAN ID is a unique value that represents the specific VLAN. This value ranges from 1 to 4094 • <vfi-id>. - VFI ID is a VLAN created in the system which contains pseudowires and attachment circuits as member ports . This creates a logical LAN for the VPLS service. This value ranges from 4096 to 65535 Note: The VLAN ID 4095 is reserved and may be used to indicate a wildcard match for the VID in management operations or filtering database entries. Note: VFI IDs 4096 and 4097 are reserved identifiers used in MPLS PW. Note: The theoretical maximum for the maximum number of VFI is 65535 but the actual number of VFI supported is a sizing constant. Based on this, the maximum number of VFI ID accepted in the management interface is restricted. For example if 100 VFIs are supported, the maximum number of VFI supported will be restricted to hundred added to the maximum number of VLANs. An error message is displayed for any value beyond this range. •
ospf - Displays the configuration done
in the OSPF module. •
rip - Displays the configuration done
in the RIP module. •
bgp - Displays the configuration done
in the BGP module. •
ipv6 - Displays the configuration done
in the IPv6 module. •
rip6 - Displays the configuration done
in the RIP6 module. •
ssh - Displays the configuration done
in the SSH module. •
ssl - Displays the configuration done
in the SSL module. •
acl - Displays the configuration done
in the ACL module. •
ip - Displays the configuration done
in the IP module. •
pim - Displays the configuration done
in the PIM module. •
vrrp - Displays the configuration done
in the VRRP module. •
snmp - Displays the configuration done
in the SNMP module. •
radius - Displays the configuration done
in the RADIUS module. •
rmon - Displays the configuration done
in the RMON module. •
rm - Displays the configuration done
in the RM module. •
mbsm - Displays the configuration done
in the MBSM module. •
ospf3 - Displays the configuration done
in the OSPFv3 module. •
mpls - Displays the configuration done
in the MPLS module. •
igmp - Displays the configuration done
in the IGMP module. •
eoam - Displays the configuration done
in the EOAM module. •
fm - Displays the configuration done
in the FM module. •
igmp-proxy - Displays the configuration done
in the IGMP proxy module. •
elmi - Displays the configuration done
in the ELMI module. • route-map - Displays the configuration done for the route map feature. • tacacs - Displays the configuration done in the TACACS module. • tac - Displays the configuration done in the TAC module. •
sntp - Displays the configuration done in the SNTP module. ▪ switch
<context_name> - Displays the configuration done in the context for
the specified module. This value represents unique name of the switch
context. This value is a string of maximum size 32. This parameter is
specific to multiple instance feature. •
nat - Displays the configuration done in the NAT module. •
elps - Displays the configuration done in the ELPS module. •
erps - Displays the configuration done in the ERPS module. ▪ switch
<context_name> - Displays the
configuration done in the context for the specified module. This value
represents unique name of the switch context. This value is a string of
maximum size 32. This parameter is specific to multiple instance feature. •
entity-mib - Displays the configuration done in the emtity-mib module. •
http - Displays the configuration done in the http module. •
poe - Displays the configuration done in the poe module. •
pbb - Displays the configuration done in the pbb module. ▪ switch
<context_name> - Displays the configuration done in the context for
the specified module. This value represents unique name of the switch
context. This value is a string of maximum size 32. This parameter is
specific to multiple instance feature. •
cn - Displays the configuration done in the cn module. ▪ switch
<context_name> - Displays the
configuration done in the context for the specified module. This value
represents unique name of the switch context. This value is a string of
maximum size 32. This parameter is specific to multiple instance feature. •
dcbx - Displays the configuration done in the extended dcbx
module. •
ptp - Displays the configuration done in the ptp module. •
clkiwf - Displays the configuration done in the clkiwf module. •
mld - Displays the configuration done in the mld module. •
msdp - Displays the configuration done in the msdp module. •
msdpv6 - Displays the configuration done in the msdpv6 module. •
lldp - Displays the configuration done
in the lldp module. •
firewall - Displays the configuration done
in the firewall module. •
system - Displays the configuration done
in the system. •
ospfte - Displays the configuration done
in the OSPF TE module. •
ipsourceguard - Displays the configuration done
in the IP Source Guard module. •
tlm - Displays the configuration done in the TLM module. •
rbridge - Displays the configuration done
in the Rbridge module. •
l2dhcsnp - Displays the configuration done
in L2 DHCP snooping module. •
mef - Displays the configuration done in MEF module. •
network-clock - Displays the configuration done in SyncE module. •
vrf
<vrf-name> - Displays the configuration done for the specified VRF instance
created in the system. •
hs - Displays the configuration
done in HotSpot module. •
bfd - Displays the configuration
done in BFD module. •
rsna - Displays the configuration done
in the RSNA module. ▪ <rsna-id>
- Displays the configuration for the specified Profile ID. This value ranges
from 1 to 512. Note:
This option is available only when RSNA
feature is enabled in WSS. •
ppp - Displays the configuration
done in PPP module. •
qosxtd - Displays the configuration
done in QoSx module. Note:
This option is available only when QoSX is
enabled. •
qosx - Displays the configuration
done in QoS module. Note: This option is available only when Diffserv is enabled. •
dsmon - Displays the configuration done
in DSMON module. •
mrp - Displays the configuration done in
MRP module. Note:
This option is available only when MRP is
enabled. •
ofcl - Displays the configuration done
in OFCL module. •
wss - Displays the configuration done
in WSS module. Note:
This
option is available only when WSS is enabled. •
vpn - Displays the configuration done
in vpn module. Note:
This
option is available only when VPN is enabled in the system. •
ipsecv6 - Displays the configuration done
in IPsecV6 module. Note:
This
option is available only when IPSecv6 is enabled in the system. • esat - Displays the configuration
done in ESAT module. Note:
This
option is available only when ESAT is enabled in the system. •
vxlan - Displays the configuration
done in VXLAN module. Note:
This
option is available only when VXLAN is enabled in the system. •
wssuser - Displays the configuration
done in WSSUSER module. Note:
This
option is available only when WSSUSER is enabled in the system. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup, Enterprise Metro, and Metro_E |
If executed without the optional parameters this command displays the current active configurations, other than the default configurations of all the modules in all the interfaces. |
|
Example |
The output given below is only a fragment of the whole output. This output differs based on the modules that are configured. SEFOS# show running-config bgp Building configuration... router bgp 100 bgp router-id 100.20.6.100 redistribute static neighbor 100.20.6.20 remote-as 200 neighbor 100.20.6.20 maximum-prefix 10 ! router bgp 100 ! End |
Related Command(s) |
Includes the configuration commands of all the modules (given as parameters in the show running-config command). |
Command Objective |
This
command displays the HTTP server status and HTTP
port. |
Syntax |
show http server status |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show
http server status HTTP server status : Enabled HTTP port is : 80 HTTP Requests In : 0 HTTP Invalids : 0 |
Related Command(s) |
• ip http port – Sets the HTTP port. •
set ip http – Enables
or disables HTTP. |
Command Objective |
This
command displays acknowledgement statement for open sources used in the
software. |
Syntax |
show system acknowledgement |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show system acknowledgement 1. SSH (Secure Shell) The SSH functionality in SEFOS is implemented using the open source software from http://www.openssh.org, developed by Theo de Raadt, Niels Provos, Markus Friedl, Bob Beck, Aaron Campbell and Dug Song. All copyrights listed at http://www.openssh.org/ apply. With respect to licensing terms, the same website explains the following: "OpenSSH is developed by the OpenBSD Project. The software is developed in countries that permit cryptography export and is freely useable and re-useable by everyone under a BSD license." A copy of the license file is available at: http://www.mips.com/LicenseMapper/OpenBSD.html. The BSD license is also described at - http://www.openbsd.org/faq/faq1.html#WhatIs OpenSSH version used - 5.1 2. SSL (Secure Socket Layer) This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit. (http://www.openssl.org/) This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software written by Tim Hudson (tjh@cryptsoft.com). The SSL functionality in SEFOS is implemented using the open source software from http://www.openssl.org, which include software written by Eric A. Young and Tim J. Hudson. All copyrights listed at http://www.openssl.org/ apply. With respect to licensing terms, the same website explains the following: "The OpenSSL toolkit is licensed under an Apache-style license, which basically means that you are free to get and use it for commercial and non-commercial purposes subject to some simple license conditions." A copy of the license file is available at: http://www.openssl.org/source/license.html. OpenSSL version used - 0.9.8i 3. For secure transfer of the software image or configuration file, SEFOS uses the SFTP (SSH File Transfer Protocol) from http://www.openssh.org, developed by Theo de Raadt, Niels Provos, Markus Friedl, Bob Beck, Aaron Campbell and Dug Song. All copyrights listed at http://www.openssh.org/ apply. With respect to licensing terms, the same website explains the following: -"OpenSSH is developed by the OpenBSD Project. The software is developed in countries that permit cryptography export and is freely useable and re-useable by everyone under a BSD license." A copy of the license file is available at: http://www.mips.com/LicenseMapper/OpenBSD.html. The BSD license is also described at - http://www.openbsd.org/faq/faq1.html#WhatIs. OpenSSH version used - 5.1 4. Telnet Client The Telnet client functionality in SEFOS is implemented using the open source software PuTTY available at: http://www.chiark.greenend.org.uk/~sgtatham/putty/ The PuTTY source code is distributed under the MIT license. A copy of the license file is available at: http://www.chiark.greenend.org.uk/~sgtatham/putty/licence.html PuTTY version used - 0.60 5. SSH Client The SSH client functionality in SEFOS is implemented using the open source software PuTTY available at: http://www.chiark.greenend.org.uk/~sgtatham/putty/ . The PuTTY source code is distributed under the MIT license. A copy of the license file is available at: http://www.chiark.greenend.org.uk/~sgtatham/putty/licence.html PuTTY version used - 0.60. |
Command Objective |
This command displays maximum number of unicast dynamic MAC (L2) MAC entries hardware can learn on the system, in MAC learning limit rate interval. |
Syntax |
show mac-learn-rate |
Mode |
Privileged EXEC mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show
mac-learn-rate Switch MAC Learn Limit Rate : 1000 Switch MAC Learn Limit Rate Interval: 1000 |
Related Command(s) |
•
mac-learn-rate - Configures the number of MAC
entries indicated to control plane from hardware, when hardware MAC learning
is enabled. |
Command Objective |
This command enables the VLAN traffic to be allowed in these configured egress ports when the ingress is this interface. The no form of the command disables the Port Isolation rule in this ingress interface. |
Syntax |
port-isolation in_vlan_ID [{add|remove}] port_list no port-isolation |
Parameter Description |
• in_vlan_ID - Configures the specified VLAN ID. This is a unique value that represents the specific VLAN created or to be created. This value ranges from 1 to 4094. • add - Configures the addition of the egress ports. • remove - Configures the removal of the egress ports. • port_list - Configures the list of ports through which the traffic is allowed. The ports can be either a physical or link aggregated port. |
Mode |
Interface Configuration Mode (physical ports or Link Aggregated port). |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS(config-if)#
port-isolation 1 add extreme-ethernet
0/2 |
Related Command(s) |
• show port-isolation - Displays the Port Isolation table. |
Command Objective |
This command displays the Port Isolation table. |
Syntax |
show port-isolation [ingress-port <ifXtype>
<ifnum>] |
Parameter Description |
• ingress-port - Ingress port refers to a physical or link aggregated port through which a packet ingress. ▪ <ifXtype> Displays the type of interface. The interface can be: • fastethernet
– Officially referred to as 100BASE-T standard. This is a version of LAN standard
architecture that supports data transfer up to 100 Megabits per second. • XL-ethernet
– A version of LAN standard architecture that supports data transfer up to 40
Gigabits per second. • extreme-ethernet
– A version of Ethernet that supports data transfer up to 10 Gigabits per
second. • internal-lan
– Internal LAN created on a bridge per IEEE 802.1ap. • port-channel – Logical interface that represents an aggregator which contains several ports aggregated together. ▪ <ifnum> Sets the interface identifier. This is a unique value that represents the specific interface. This value is a combination of slot number and port number separated by a slash, for interface type other than internal-lan and port-channel. Only i-lan or port-channel ID is provided, for interface types internal-lan and port-channel. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show
port-isolation Ingress Port VlanId StorageType Egress List ============ ====== =========== =========== Ex0/2 10 Non-Volatile Ex0/1 Ex0/3 - Non-Volatile Ex0/2 |
Related Command(s): |
•
port-isolation in_vlan_ID -
Enables the VLAN traffic to be allowed in these configured egress ports when
the ingress is this interface. |
Command Objective |
This command configures the system timer speed. This value ranges from 1 to 1000. |
Syntax |
set timer speed
<timer-speed(1-1000)> |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS(config)#
set timer speed 100 |
Command Objective |
This command configures the number of physical ports in a device for the purpose of switching or routing. The value should not exceed the system defined maximum physical interfaces. When the configured value is less than the maximum physical interfaces, the difference in port count is used for stacking purpose only when the stacking is enabled. Else, the ports are considered as physically not present and would not be initialized. |
Syntax |
set front-panel port-count
<ports> |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Note:
|
• It is not advisable to change the front panel port count when some configurations are already saved. •
Once the front panel port count is configured,
the switch has to be restarted before saving any configuration. |
Example |
SEFOS(config)#
set front-panel port-count 24 |
Command Objective |
This command enables or disables audit logging that allows
users to configure audit trails, which track changes that have been made to a
router. Each change is logged as a syslog message, and all syslog messages
are kept in the audit file, which is kept in the audit subsystem. |
Syntax |
audit-logging { enable | disable} |
Parameter Description |
• enable - Enables audit logging. • disable - Disables audit logging. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
Disable |
Example |
SEFOS(config)#
audit-logging enable |
Related Command(s) |
• audit-logging filename - Specifies the name of the file to which audit log is saved. • audit-logging filesize - Specifies the the maximum file size in kilobytes of the configs.txt file. • audit-logging reset - Erases the contents in configs.txt file and start logging. •
show confg log - Displays information
related to audit logging. •
show audit - Displays the content of the
audit-log file. |
Command Objective |
This command specifies the name of the file to which audit log is saved. The maximum string value of the file name is 128. |
Syntax |
audit-logging filename
<filename> |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
Config.txt |
Example |
SEFOS(config)#
audit-logging filename srv.txt |
Related Command(s) |
• audit-logging – Enables or disables audit logging. • audit-logging filesize - Specifies the the maximum file size in kilobytes of the configs.txt file. • audit-logging reset - Erases the contents in configs.txt file and start logging. •
show confg log - Displays information
related to audit logging. •
show audit - Displays the content of the
audit-log file. |
Command Objective |
This command is used to erase the contents in configs.txt file and start logging. |
Syntax |
audit-logging reset |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS(config)#
audit-logging reset |
Related Command(s) |
• audit-logging – Enables or disables audit logging. • audit-logging filesize - Specifies the the maximum file size in kilobytes of the configs.txt file. • audit-logging filename - Specifies the name of the file to which audit log is saved. •
show confg log - Displays information
related to audit logging. •
show audit - Displays the content of the
audit-log file. |
Command Objective |
This command specifies the name of the default RM interface that can be used for communication between the Active and Standby nodes for providing redundancy support. The default RM interface, if modified, will take effect only when the switch is restarted. The maximum size of the string is 23. |
Syntax |
default rm-interface
<if-name> |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
None |
Example |
SEFOS(config)#
default rm-interface int1 |
Related Command(s) |
• default rm-interface-type - Configures the type of interface used for RM communication. |
Command Objective |
This command enables a flag which assigns a unique MAC
address to each virtual router. Configuring this command results in updating
the sefosnvram.file and the configured value will be effective from next SEFOS
boot. |
Syntax |
vrf unq-mac { enable | disable } |
Parameter Description |
• enable - Enables a flag which assigns a unique MAC address to each virtual router. The value 1 represents enable. •
disable - Disables
a flag which assigns a unique MAC address to each virtual router. The value 0
represents disable. |
Mode |
Global Configuration Mode |
Default |
disable |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS(config)#
vrf unq-mac enable |
Command Objective |
This command displays information related to audit logging. |
Syntax |
show
config log |
Mode |
Privileged
EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show
config log Audit
Status : Enabled Audit File
Name :
config.text Audit File Size : 1025 Audit Log Size Threshold : 70 |
Related Command(s) |
• audit-logging – Enables or disables audit logging. • audit-logging filename - Specifies the name of the file to which audit log is saved. • audit-logging filesize - Specifies the the maximum file size in kilobytes of the configs.txt file. • audit-logging reset - Erases the contents in configs.txt file and start logging. |
Command Objective |
This command permits the enabling and disabling of the
generation of log or trace messages throughout the module. It acts as a
Tracing Level Flag and specifies the level of trace or log to be enabled in
the module. |
Note:
|
The if defined (MEMTRACE_WANTED)switch should be enabled before executing this command. |
Syntax |
memtrace {enable|disable} |
Parameter Description |
• enable - Enabling the generation of log or trace messages throughout the module. •
disable - Disabling
the generation of log or trace messages throughout the module. |
Mode |
Privilege
Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# memtrace
enable |
Related Command(s) |
• show memtrace status - Displays the memtrace status. |
Command Objective |
This command displays the memtrace status. |
Syntax |
show memtrace status {cru|system} |
Parameter Description |
•
cru - Displays CRU(common routing
utilities) buffer Memory Allocation data. •
system - Displays System Memory
Allocation data. |
Mode |
Privileged
EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show
memtrace status cru |
Related Command(s) |
•
memtrace - Permits the enabling and
disabling of the generation of the log or trace messages throughout the
module. |
Command Objective |
This command displays the mempool leak-related
information and statistics. |
Note:
|
This command executes only if MEMTRACE_WANTED is enabled. |
Syntax |
show
mempool [leak] |
Mode |
Privileged
EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show mempool |
Related Command(s) |
• memtrace - Permits the enabling and disabling of the generation of the log or trace messages throughout the module. |
Command Objective |
This command enables or disable the Head-of-Line Blocking
prevention which manages the HOL blocking situation by checking whether the
packet has been assigned priority. If the packets have assigned priority,
those packets are placed in a separate queue. The low priority data can be
discarded as applications keep track of whether a re-transmission is
necessary or not. |
Note: |
This command is available only if NPAPI is enabled in the switch. |
Syntax |
hol blocking prevention |
Mode |
Global
Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS (config)#
hol blocking prevention |
Command Objective |
This command sets the VLAN list for the L3 VLAN interface. The no form of the command resets the VLAN list for the L3
VLAN interface. |
Note: |
This command is available only if WGS is enabled in the switch. |
Syntax |
management vlan-list
<vlan-list> no management vlan-list
<vlan-list> |
Mode |
Global
Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS(config)#
management vlan-list 1 |
Related Command(s) |
•
show management vlan - Displays
the VLANs associated with the management interface. |
Command Objective |
This command configures the maximum number of successful login attempts and the lock out time to block the user. |
Syntax |
login block-for
<seconds(30-600)> attempts <tries(1-10)> |
Parameter Description |
• <seconds(30-600)> - Configures the lock out time in seconds that a user is blocked following unsuccessful logins. This value ranges from 30 to 600. • <tries(1-10)> - Configures login attempts. This is the number of times a user is allowed to login using wrong password in the login prompt. This value ranges from 1 to 10. |
Mode |
Global Configuration Mode |
Package |
Enterprise,
Work Group, Metro_E, and Metro |
Default |
• seconds - 30 • tries - 3 |
Example |
SEFOS(config)#
login block-for 30 attempts 3 |
Command Objective |
This command configures the threshold value of the log storage space with respect to the maximum storage space size. The threshold value in percentage ranges between 1 and 99. |
Syntax |
audit-logging logsize-threshold
<threshold in %(1-99)> |
Mode |
Global Configuration Mode |
Package |
Enterprise,
Work Group, Metro_E, and Metro |
Default |
threshold in % - 70 |
Example |
SEFOS(config)#
audit-logging logsize-threshold 99 |
Related Command(s) |
• show config log - Displays the information related to audit logging. • show audit - Displays the content of the audit-log file. |
Command Objective |
This command enables the telnet service in the system. The no form of this command disables the telnet service. |
Syntax |
feature telnet no feature telnet |
Mode |
Global Configuration Mode |
Package |
Enterprise,
Work Group, Metro_E, and Metro |
Default |
The telnet service is enabled |
Example |
SEFOS(config)#
feature telnet |
Related Command(s) |
• show telnet server - Displays the telnet server status. |
Command Objective |
This command displays the telnet server status. |
Syntax |
show telnet server |
Mode |
Privileged
EXEC Mode |
Package |
Enterprise,
Work Group, Metro_E, and Metro |
Example |
SEFOS# show
telnet server telnet service
enabled |
Related Command(s) |
• feature telnet - Enables the telnet service in the system. |
Command Objective |
This command displays the content of the audit-log file. |
Syntax |
show audit [filestat] |
Parameter Description |
•
filestat -
Displays rollover counter and number of messages received. |
Mode |
Privileged
EXEC Mode |
Package |
Enterprise,
Work Group, Metro_E and Metro |
Example |
SEFOS# show audit filestat Audit:root audit-logging reset SUCCESS CONSOLE Wed Oct 8 17:06:29 2014 Audit:root default rm-interface int1 SUCCESS CONSOLE Wed Oct 8 17:06:29 2014 Audit:root vrf unq-mac enable SUCCESS CONSOLE Wed Oct 8 17:06:29 2014 Audit:root internal-lan 1 add interface virtual 1 FAILURE CONSOLE Wed Oct 8 17:06:29 2014 Audit:root set entity physical-index 2222222 asset-id 8 serial-number 7 alias-name FAILUR E CONSOLE Wed Oct 8 17:06:29 2014 Audit:root web-session timeout 120 SUCCESS CONSOLE Wed Oct 8 17:06:29 2014 Audit:root automatic-port-create enable SUCCESS CONSOLE Wed Oct 8 17:06:29 2014 Audit:root automatic-port-create disable SUCCESS CONSOLE Wed Oct 8 17:06:29 2014 Audit:root traffic-separation control system_default SUCCESS CONSOLE Wed Oct 8 17:06:29 20 14 Audit:root end SUCCESS CONSOLE Wed Oct 8 17:06:29 2014 Audit:root configure terminal SUCCESS CONSOLE Wed Oct 8 17:06:29 2014 Audit:root interface extreme-ethernet 0/3 SUCCESS CONSOLE Wed Oct 8 17:06:29 2014 SEFOS# show audit Audit:root audit-logging reset SUCCESS CONSOLE Wed Oct 8 17:06:29 2014 Audit:root default rm-interface int1 SUCCESS CONSOLE Wed Oct 8 17:06:29 2014 Audit:root vrf unq-mac enable SUCCESS CONSOLE Wed Oct 8 17:06:29 2014 Audit:root internal-lan 1 add interface virtual 1 FAILURE CONSOLE Wed Oct 8 17:06:29 2014 Audit:root set entity physical-index 2222222 asset-id 8 serial-number 7 alias-name FAILUR E CONSOLE Wed Oct 8 17:06:29 2014 Audit:root web-session timeout 120 SUCCESS CONSOLE Wed Oct 8 17:06:29 2014 Audit:root automatic-port-create enable SUCCESS CONSOLE Wed Oct 8 17:06:29 2014 Audit:root automatic-port-create disable SUCCESS CONSOLE Wed Oct 8 17:06:29 2014 Audit:root traffic-separation control system_default SUCCESS CONSOLE Wed Oct 8 17:06:29 20 14 Audit:root end SUCCESS CONSOLE Wed Oct 8 17:06:29 2014 Audit:root configure terminal SUCCESS CONSOLE Wed Oct 8 17:06:29 2014 Audit:root interface extreme-ethernet 0/3 SUCCESS CONSOLE Wed Oct 8 17:06:29 2014 |
Related Command(s) |
• audit-logging – Enables or disables audit logging. • audit-logging filename - Specifies the name of the file to which audit log is saved. • audit-logging filesize - Specifies the the maximum file size in kilobytes of the configs.txt file. • audit-logging reset - Erases the contents in configs.txt file and start logging. • audit-logging logsize-threshold - Configures the threshold value of the log storage space with respect to the maximum storage space size. |
Command Objective |
This command configures the Configurable HTTP authentication scheme. |
Syntax |
set http authentication-scheme
{default | basic | digest} |
Parameter Description |
• default - Sets the configurable HTTP authentication scheme to default. • basic - Sets the configurable HTTP authentication scheme to basic. • digest - Sets the configurable HTTP authentication scheme to digest. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Default |
default |
Example |
SEFOS (config)#
set http authentication-scheme basic |
Related Command(s) |
•
show http
authentication-scheme - Displays the operational and configurable
authentication scheme values. |
Command Objective |
This
command enables the HTTP redirection feature. The no
form of this command disables the HTTP redirection feature. |
Syntax |
set http redirection enable no http redirection enable |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Default |
HTTP
redirection is disabled. |
Example |
SEFOS (config)#
set http redirection enable |
Command Objective |
This
command configures the alternate server for the URL specified. The alternate
server’s IP or Domain name can be specified. On receiving request for the
URL, a redirection status is sent as response for the request. The no form of this command removes the redirection entry added to the server specified for the URL. |
Syntax |
http redirect <URL to be
redirected> server {IPv4 Address |IPv6 Address | Domain name} no http redirect [<URL to be
redirected>] |
Parameter Description |
• <URL to be redirected> - Configures the URL which has to be redirected. • server - Configures the server for the URL which is redirected. The options are: • IPv4 Address – Sets the IP address of the alternate server in v4 format. • IPv6 Address – Sets the IP address of the alternate server in v6 format. • Domain name - Configures the domain name of the alternate server. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS (config)#
http redirect /sample/ server 12.0.0.2 |
Related Command(s) |
•
show http redirection - Displays
the redirection entries filtered by URL or all the entries. |
Command Objective |
This
command displays the operational and configurable authentication scheme
values. |
Syntax |
show http authentication-scheme |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# show http authentication-scheme The
Operational HTTP authentication scheme is Default The Configured HTTP authentication scheme is Basic |
Related Command(s) |
•
set http authentication-scheme
– Sets the configurable HTTP authentication scheme value to
default or basic or digest. |
Command Objective |
This command displays the redirection entries filtered by URL or all the entries. |
Syntax |
show http redirection [URL] |
Parameter Description |
• URL - Configures the URL for which the redirection entry has to be displayed. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Example |
SEFOS# show http redirection /sample/ HTTP Redirection Entries ---------------------------- URL Server
IP/DomainName ---
-------------------- /sample/ 12.0.0.2 |
Related Command(s) |
• http redirect - Configures the alternate server for the URL specified. |
Entity MIB is a standardized way of representing a single
agent, which supports multiple instances of one MIB. With the Entity MIB
support in SEFOS, all the instances of the MIBs registered with agent are
identifiable, so that the NMS (Network Management System) can easily
communicate with the particular instance or logical entity. Entity MIB also
provides the complete hierarchal hardware component view to the user.
Command Objective |
This command configures the read-write objects of the physical components present in the system which defines a greater than zero value used to identify a physical entity. The physical index is an arbitrary value that uniquely identifies the physical entity which can be small positive integer. |
Syntax |
set entity physical-index
<integer (1..2147483647)> {[asset-id <SnmpAdminString (Size
(1..32))>] [serial-number
<SnmpAdminString (Size (1..32))>] [alias-name
<SnmpAdminString (Size (1..32))>] [uris <OCTET-STRING (Size
(1..255))>]} no entity physical-index
<integer (1-2147483647)> [assetId] [serial-number][alias-name][uris] |
Parameter Description |
• <integer(1..2147483647)>
- Specifies the index of the physical entity. This value ranges from 1 to 2147483647. •
asset-id - Specifies the asset tracking
identifier for the physical entity. This value is a string of size varying
between 1 and 32 characters. Asset tracking identifier is not needed for the
physical entities (such as repeater ports within a repeater module) that are
not considered as a field replaceable unit by the vendor. A zero-length
string is returned for these entities. •
serial-number - Specifies
the vendor-specific serial number string for the physical entity. This value is a string of size
varying between 1 and 32 characters. Serial number string is not needed for
the physical entities (such as repeater ports within a repeater module) that
are not considered as a field replaceable unit by the vendor. A zero-length
string is returned for these entities. •
alias-name - Specifies
the alias name for the physical entity. This value provides a non-volatile
handle for the entity. This
value is a string of size varying between 1 and 32 characters. • uris - Specifies the additional identification information (that is URI (Uniform Resource Indicator) about the physical entity. This value ranges from 1 to 255 . |
Mode |
Global Configuration Mode |
Package |
Workgroup, Enterprise Metro, and Metro_E |
Default |
• assetId - Zero-length string, on initial instantiation of the physical entity. • serial-number - Zero-length string, on initial instantiation of the physical entity, if a serial number is unknown or non-existent. Correct vendor-assigned serial number, on initial instantiation of the physical entity, if the serial number is available to the SNMP agent. • alias-name - Zero-length string, on initial instantiation of the physical entity. The SNMP agent may also set the value to a locally unique default value. |
Note:
|
• If write access is implemented for an instance of asset ID and a value is written into the instance, SNMP agent should retain the value as long as the entity associated with the instance remains instantiated. This instantiation includes the instantiation across all re-initialization or reboot of the NMS, and instantiation resulting in a change of the physical entity’s index value. • If write access is implemented for an instance of the serial number string and a value is written into the instance, SNMP agent should retain the value as long as the entity associated with the instance remains instantiated. This instantiation includes the instantiation across all re-initialization or reboot of the NMS, and instantiation resulting in a change of the physical entity’s index value. • If the agents cannot provide non-volatile storage for the serial number string, then the agents are not required to implement write access for the the serial number string object. • Implementations that can correctly identify the serial numbers of all installed physical entities are not required to provide write access to the serial number string object. • If write access is implemented for an instance of the alias name and a value is written into the instance, SNMP agent should retain the value as long as the entity associated with the instance remains instantiated. This instantiation includes the instantiation across all re-initialization or reboot of the NMS, and instantiation resulting in a change of the physical entity’s index value. |
Example |
SEFOS(config)#
set entity physical-index 2222222 asset-id 8 serial-number 7 alias-name GJG
uris yg |
Related Command(s) |
• show entity physical - Displays the physical entities. |
Command Objective |
This command displays multiple logical entities within a single physical entity. The overall physical entity contains multiple (smaller) physical entities and each logical entity is associated with a particular physical entity. |
Syntax |
show entity logical [index
<integer (1..2147483647)>] |
Parameter Description |
• index<integer (1..2147483647)> - Displays the index of the logical entity. This value ranges from 1 to 2147483647. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup, Enterprise Metro, and Metro_E |
Example |
SEFOS# show entity logical index 1 Logical Index:
1 Logical
Description: Aricent Linux Router Ver 1.0 Logical Type:
stdpnac Logical
Community: default Logical
Transport Address: Logical
Transport Domain: Logical
Context Engine Id: 80:00:08:1c:04:46:64 Logical
Context Name: default |
Related Command(s) |
•
set
entity physical-index - Configures the read-write objects of the physical components
present in the system. |
Command Objective |
This command displays the physical entities which are physical components that represents an identifiable physical resource within a managed system. Zero or more logical entities may utilize a physical resource at any given time. |
Syntax |
show entity physical [index
<integer (1..2147483647)>] |
Parameter Description |
• index<integer (1..2147483647)> - Displays the index of the physical entity. This value ranges from 1 to 2147483647. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup, Enterprise Metro, and Metro_E |
Example |
SEFOS# show
entity physical index 1 Physical
Index: 1 Physical
Descr: Network Element Physical
VendorType: Physical
ContainedIn: 0 Physical
Class: Chassis Physical
ParentRelPos: 0 Physical Name:
SEFOS Physical
HardwareRev: 5.9.1 Physical
SoftwareRev: 6.2.0 Physical
FirmwareRev: 6.7.2 Physical
Serial Num: not available Physical MfgName:
Aricent Physical
ModelName: not available Physical
Alias: DummyName Physical
AssetID: DummyId Physical
MfgDate: 2009-8-6,13:30:30.1 Physical Uris:
not available Physical FRU
Status: True |
Related Command(s) |
• interface-configuration and deletion - Configures interface such as out-of-band management, port channel, tunnel and so on •
set entity physical-index
- Configures the read-write objects of the physical components present in the
system. |
Command Objective |
This
command displays the mapping of logical and physical entities, interfaces,
and non-interface ports managed by a single agent. The LP-Mapping contains
mappings between logical entities and physical components supporting that
entity. A logical entity can map to more than one physical component, and
more than one logical entity can map to the same physical component. |
Syntax |
show entity lp-mapping |
Mode |
Privileged EXEC Mode |
Package |
Workgroup, Enterprise Metro, and Metro_E |
Example |
SEFOS# show entity lp-mapping Logical Entity Mapped Physical Entity -------------- ---------------------- 1 () 10 (Port) 2 () 12 (Port) |
Related Command(s) |
•
map switch -
Maps the port to the context. |
Command Objective |
This command displays the mapping of logical and physical entity with the alias external object identifiers values. This allows resources managed with other MIBs (e.g. repeater ports, bridge ports, physical and logical interfaces) to be identified in the physical entity hierarchy. Each alias identifier is only relevant in a particular naming scope. |
Syntax |
show entity alias-mapping [index
<integer (1..2147483647)>] |
Parameter Description |
• index <integer (1..2147483647)> - Displays the index of the physical entity. This value ranges from 1 to 2147483647. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup, Enterprise Metro, and Metro_E |
Example |
SEFOS# show
entity alias-mapping Physical
Entity Logical Entity Mapped External Identifier --------------- -------------- -------------------------- 10 (Port) all 11 (Port) all 12 (Port) all 13 (Port) all 14 (Port) all 15 (Port) all |
Related Command(s) |
•
interface – configuration and
deletion - Configures interface such as out-of-band management,
port channel, tunnel and so on. |
Command Objective |
This command displays the simple mapping between the physical contained values for each container and containee relationship in the managed system. |
Syntax |
show entity phy-containment [index
<integer (1..2147483647)>] |
Parameter Description |
• index
<integer (1..2147483647)> - Displays the index of the physical entity. This
value ranges from 1 to 2147483647. |
Mode |
Privileged
EXEC Mode |
Package |
Workgroup, Enterprise Metro, and Metro_E |
Example |
SEFOS# show entity phy-containment Containmaint Relationship ------------------------- Physical Entity : 1 (Chassis) Member Physical Entities : 2 (Cpu), 3 (Power Supply), 4 (Fan) 5 (Fan), 6 (Fan), 7 (Fan) 8 (Fan), 9 (Module) Physical Entity : 9 (Module) Member Physical Entities : 10 (Port), 11 (Port), 12 (Port) 13 (Port), 14 (Port), 15 (Port) ------------------------------------------------------------ |
Related Command(s) |
• interface – configuration and deletion - Configures interface such as out-of-band management, port channel, tunnel and so on |
Command Objective |
This command enables the hitless restart feature by which the software is restarted without affecting any datapath and without disturbing the protocol relationships with any peer nodes. |
Syntax |
set hitless-restart enable |
Mode |
Privileged EXEC Mode |
Package |
Metro and Metro_E |
Default |
Hitless restart is disabled. |
Example |
SEFOS# set hitless-restart enable <129>Nov 9 04:54:50 SEFOS FM [FM - RM] : 131.0.0.1 RM : ACTIVE completed started none :: Nov 9 04:54:49 2011 SEFOS# Nov 9 04:54:49 2011: RM[ACTIVE]: Hitless Restart: Bulk storage completed.Nov 9 04:54:49 2011: RM[ACTIVE]: Hitless Restart: Steady state pkt request starts. Nov 9 04:54:49 2011: RM[ACTIVE]: Hitless Restart: All Steady State packets are stored in NPSIM.Nov 9 04:54:49 2011: RM[ACTIVE]: Do write start-up and PLEASE RESTART THE EXE |
Command Objective |
This command establishes SSH client session with the specified IP address. |
Note: |
This command is available only if OPENPUTTY is enabled in the switch. |
Syntax |
ssh <ipv4_addr/ipv6_addr>
[-1] [-2] [-4] [-6] [-A] [-a] [-C] [-N] [-s]
[-V] [-v] [-l <username>] [-T] [-t] [<remote-command>] |
Parameter Description |
• <ipv4_addr/ipv6_addr> - Establishes SSH client session for the specified IP address. It supports both IPv4 and IPv6 addresses. •
-1 -
Forces SSH to try protocol version 1. •
-2 - Forces SSH
to try protocol version 2. •
-4 - Forces SSH
to use IPv4 addresses only. •
-6 - Forces SSH
to use IPv6 addresses only. •
-A - Enables
forwarding of the authentication agent connection. •
-a - Disables
forwarding of the authentication agent connection. •
-C - Requests
compression of all data. •
-N - Does not
execute a remote command. •
-s - Specifies
the subsystem as the remote command (SSH-2 only). •
-V - Supports
print version information and exit. •
-v - Displays
verbose messages. •
-l <username>
- Specifies the user name. • -T - Disables pseudo-tty allocation. • -t - Enables force pseudo-tty allocation. •
<remote-command>
- Specifies the remote command to be executed. If it is more than one
argument use double quotes. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# ssh
12.0.0.0 |
Related Command(s) |
•
show – ssh/telnet client - Displays the status of SSH and telnet clients. |
Command Objective |
This command establishes telnet client session with the specified IP address. |
Note: |
This command is available only if OPENPUTTY is enabled in the switch. |
Syntax |
telnet <ipv4_addr/ipv6_addr>
[-l <username>] |
Parameter Description |
•
<ipv4_addr/ipv6_addr>
- Establishes telnet client session for the specified IP address. It supports
both IPv4 and IPv6 addresses. •
-l <username>
- Specifies the user name. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# telnet
12.0.0.0 |
Related Command(s) |
•
show – ssh/telnet client - Displays the status of SSH and telnet clients. |
Command Objective |
This command enables or disables telnet client feature. |
Note: |
This command is available only if OPENPUTTY is enabled in the switch |
Syntax |
set telnet-client { enable |
disable } |
Parameter Description |
• enable - Enables the telnet client feature. •
disable - Disables
the telnet client feature. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
enable |
Example |
SEFOS# set
telnet-client disable |
Related Command(s) |
•
show – ssh/telnet client - Displays the status of SSH and telnet clients. |
Command Objective |
This command enables or disables SSH client feature. |
Note: |
This command is available only if OPENPUTTY is enabled in the switch. |
Syntax |
set ssh-client { enable | disable
} |
Parameter Description |
• enable - Enables the SSH client feature. •
disable - Disables
the SSH client feature. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
enable |
Example |
SEFOS# set
ssh-client enable |
Related Command(s) |
•
show – ssh/telnet client - Displays the status of SSH and telnet clients. |
Command Objective |
This command displays the status and number of active
sessions of SSH and telnet clients. |
Note: |
This command is available only if OPENPUTTY is enabled in the switch |
Syntax |
show { ssh-client | telnet-client
} |
Parameter Description |
• ssh-client - Displays the status and number of active sessions of SSH client. •
telnet-client - Displays
the status and number of active sessions of telnet client. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# show
telnet-client Telnet
Client Status : ENABLED No.of
Active Telnet Clients : 0 |
Related Command(s) |
•
set ssh-client – Sets
the status of SSH client. •
set telnet-client - Sets
the status of telnet client. |
Command Objective |
This command sets the speed of the interface. |
This command executes only if NPAPI is enabled. |
|
Syntax |
speed { 10 | 100 | 1000 | 10000 |
40000 | 56000 | auto | nonegotiate} |
Parameter Description |
•
10 - Sets the
port to run at 10Mbps. •
100 - Sets the
port to run at 100Mbps. •
1000 - Sets the
port to run at 1000Mbps. •
10000 - Sets the
port to run at 10000Mbps. •
40000 - Sets the
port to run at 40000Mbps. •
56000 - Sets the
port to run at 56000Mbps. •
auto - Detects
and sets the speed of the port automatically based on the peer switch. •
nonegotiate - Disables
negotiation on the ports. |
Mode |
Interface Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS(config-if)#
speed 10 |
Command Objective |
This command clears all the configurations done in SEFOS. All configurations will be cleared and default configurations will be restored. When the file name is given, after the configurations are
cleared, the switch will be brought up with the default configurations given
in the input file. Otherwise the current active configurations in SEFOS will
be cleared and the switch will revert to default configuration. |
Note: |
clear config command should be executed only on the Active node. |
Syntax |
clear
config[default-config-restore <filename>] |
Parameter Description |
•
default-config-restore
<filename> - Restores
the default configuration. This is the name of the file, which contains the
default configurations to be restored once configurations are cleared. When
this file name is given, configurations in this file are assumed to be
default configurations. The file name is a string with the maximum length
as 128. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup
, Enterprise Metro and Metro_E |
Note: |
To execute the clear config command, the following modules should be enabled and disabled before compiling in their respective pakages: • Workgroup: ▪ DSMON - NO ▪ DHCP6_CLNT- YES ▪ DHCP6_RLY- YES ▪ DHCP6_SRV - YES ▪ CN - NO ▪ DCBX - NO ▪ RBRG_ NO ▪ MLDS - - YES ▪ PVRST - - YES ▪ IP6RTR - YES ▪ OPENPUTTY - YES ▪ SNTP - YES ▪ MRP - NO ▪ TAC - NO • METRO: ▪ LCM - NO ▪ MPLS - NO • For all packages: ▪ EVCPRO - NO ▪ ERPS - YES ▪ BFD - NO ▪ MFWD - NO |
Example |
SEFOS# clear config |
Command Objective |
This command displays the status of whether the packets can be sent or received for a service-instance in a context. |
Syntax |
show provider-backbone line
service-instance <integer(256-16777214)> switch <string(32)> |
Parameter Description |
• <integer(256-16777214)> - Displays status of a service-instance packets for the specified service-instance. This value ranges from 256 to 16777214. • switch <string(32)> - Displays status of a service-instance packets , for the specified context. This value represents unique name of the switch context. This value is a string of maximum size 32. This parameter is specific to multiple instance feature. |
Mode |
Privileged EXEC Mode |
Package |
Metro and Metro_E |
Example |
SEFOS# show
provider-backbone line service-instance 345 switch switch1 line protocol is up (connected) |
Command Objective |
This command makes the SEFOS sleep for the given time.
Sleep delays the SEFOS CLI thread for the configured seconds. This value
ranges from 1 to 65535 in seconds. |
Syntax |
sleep <seconds(1-65535)> |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Example |
SEFOS# sleep 5 |
Command Objective |
This command enables the pause ingress rate limit above which PAUSE frames are transmitted on the interface. The no form of the command disables pause ingress rate limiting on a port. |
Note: |
This command executes only if NPAPI is enabled. |
Syntax |
rate-limit pause
[<high-watermark>] [<low-watermark>] no rate-limit pause |
Parameter Description |
• <high-watermark> - Configures the ingress rate equal to or above which PAUSE frames are transmitted. This value ranges from 1 to 80000000 kbps. •
<low-watermark> - Configures the ingress
rate below which transmission of PAUSE frames are stopped. This value ranges
from 1 to 80000000 kbps. |
Mode |
Interface
Configuration Mode (Physical) |
Package |
Workgroup, Enterprise Metro, and Metro_E |
Example |
SEFOS
(config-if)# rate-limit pause 400000 300000 |
Related Command(s) |
• show interfaces - Displays the interface status and configuration. |
Command Objective |
This command enables software learning of MAC address from the packets arriving on the interface instead of hardware learning of MAC address. The no form of the command disables CPU-controlled
learning of MAC address on the interface. |
Note: |
This command executes only if NPAPI is enabled |
Syntax |
cpu controlled learning no cpu controlled learning |
Mode |
Interface
Configuration Mode (Physical) |
Package |
Workgroup, Enterprise Metro, and Metro_E |
Example |
SEFOS
(config-if)# cpu controlled learning |
Command Objective |
This command configures the method for receiving control packets to CPU. This control ensures that the CPU processing capacity is utilized appropriately, according to the need of the protocol. |
Syntax |
traffic-separation control
{system_default | user_defined | none} |
Parameter Description |
• System_default - Configures the method for receiving control packets to CPU as system-default . This implies that the software can automatically install the ACL and QoS rules for all the control packets. Note: If the configuration is changed from 'system_default' to 'user_defined' option, then all the default ACL and QoS rules for carrying protocol control packets to CPU are removed. Then user has to install the specific ACL and QoS rules, to carry the intended control packets to CPU for the processing. • User_defined
- Configures the method for receiving
control packets to CPU as user-defined. This implies that the software cannot automatically install
the ACL and QoS rules for all the control packets. Only the administrator can install the required
rules for receiving control packets to CPU Note: If the configuration is changed from user-defined to system-default or none, all the default ACL filters are installed. Already existing (if any) user-configured ACL rules in the system are not removed. • none - Configures the method for receiving control packets to CPU as none. Note: If the configuration is changed from 'none' to 'system_default' option, then all the default ACL filters for carrying protocol control packets to CPU are removed and new set of filters will be installed. Each filter will be associated with QoS rules. Note: If the configuration is changed from 'none' to 'user_defined' option, then all the default ACL filters for carrying protocol control packets to CPU are removed. Then user has to install the specific ACL and QoS rules, to carry the intended control packets to CPU for the processing. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise, Metro, and Metro_E |
Default |
none |
Example |
SEFOS (config)# traffic-separation
control
system_default |
Related Command(s) |
• show access-lists - Shows the configuration details. |
Command Objective |
This command enables the MDI or MDIX Auto Crossover of the interface The no form of the command disables the MDI or MDIX Auto Crossover of the interface and set the port as MDIX port. |
This command executes only if NPAPI is enabled |
|
Syntax |
mdix auto no mdix auto |
Mode |
Interface Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
Default |
AutoCross
is disabled |
Example |
SEFOS(config-if)#
mdix auto |
Related Command(s) |
•
set port - Sets the port to MDI or
MDIX mode. |
Command Objective |
This command sets the port to MDI or MDIX mode. This command is hardware-specific and MDIX is the vice versa of MDI. |
This command executes only if NPAPI is enabled. |
|
Syntax |
set port { mdi | mdix } |
Parameter Description |
•
mdi - Sets the
port to MDI mode. This is hardware-specific where transmit pair is pins 1,2
and the receive pair is 3,6 pins for the particular port. •
mdix - Sets the
port to MDIX mode. This is hardware-specific where transmit pair is pins 3, 6
and the receive pair is 1, 2 pins for the particular port. MDIX is the vice
versa of MDI. |
Mode |
Interface Configuration Mode |
Package |
Workgroup,
Enterprise Metro, and Metro_E |
This
command executes only when Auto cross is disabled. |
|
Example |
SEFOS(config-if)#
set port mdix |
Related Command(s) |
•
mdix port - Enables the MDI or MDIX Auto Cross over of the
interface. |
Command Objective |
This command configures the startup configuration restore option. |
Syntax |
config-restore {flash | remote
ip-addr <ip-address> file <filename> | norestore} |
Parameter Description |
• flash - Restores the flash file that is to be used for restoration when the system is restarted. • remote ip-addr <ip-address> - Restores the IP address of the remote system from where the switch configurations have to be downloaded to the 'Startup Configuration File' in the flash. • file <filename> - Restores the specified remote location file that is to be used for restoration. This is a string with maximum size as 12. •
norestore -
Specifies that the switch configurations need not be restored when the system
is restarted. |
Mode |
Privileged EXEC Mode |
Package |
Workgroup,
Enterprise, Metro_E, and Metro |
Default |
norestore |
Example |
SEFOS# config-restore flash |
Related
Command(s) |
•
show system information
– Displays the system information. |
Command Objective |
This command enables or disables the management port
routing function. |
Syntax |
set mgmt-port routing {enable |
disable} |
Parameter Description |
•
enable - Enables the routing function over
the Management Interface. This
object can be configured only if the Management Port is used for IP Access. •
disable -
Disables the routing
function over the Management Interface. This object can be configured only if the Management
Port is used for IP Access. |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise, Metro_E, and Metro |
Default |
disable |
Example |
SEFOS (config)#
set mgmt-port routing enable |
Command Objective |
This command sets the name of the switch. This is a string with maximum
size as 15. |
Syntax |
set switch-name <switchname> |
Mode |
Global Configuration Mode |
Package |
Workgroup,
Enterprise, Metro_E, and Metro |
Example |
SEFOS(config)#
set switch-name default |
Related
Command(s) |
•
show system information
– Displays the system information. |
|
|
|
|
|
|